Carle Health Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Carle Health data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Carle Health
Carle Health is a nonprofit, vertically integrated health system based in Urbana, Illinois. Founded in 1946, Carle Health has expanded through acquisitions and now operates in 16 communities.
Carle Health is known for providing a wide range of healthcare services, including trauma care, cancer treatment, and advanced specialty care.
What Happened?
On April 23, 2026, Carle Health was notified by its vendor, XSolis Inc., that XSolis had experienced unauthorized network activity due to a targeted phishing attack that occurred on Jan. 22, 2026.
XSolis, which provides select services for Carle Health patients, contained the incident and engaged cybersecurity experts.
The following types of information may have been exposed:
Information Exposed:
- Names
- Dates of birth
- Doctor names
- Health insurance information
- Diagnoses
- Medical record numbers
- Dates and locations of treatment
- Social Security numbers
Carle Health confirmed there was no impact to its own medical records or electronic environment.
You May Be Entitled to Compensation
If a person’s information was exposed in the Carle Health data breach, they may be eligible for compensation. Lawyers are investigating claims on behalf of those affected.
Completing the below form is the first step to join a lawsuit and protect one’s rights.
.png)