Xsolis, Inc., an AI-driven healthcare technology company, experienced a data breach stemming from a targeted phishing attack on January 20, 2026. The company discovered the incident on January 22, 2026. The breach involved unauthorized access to sensitive personal and protected health information.
The compromised data potentially includes names, addresses, dates of birth, Social Security numbers, health insurance information, medical treatment information, government IDs, and financial information for 1,396,519 individuals. While Xsolis has stated no misuse of information is currently known, they have provided notification and access to 12 months of free credit monitoring via Kroll.
Data breach details can continue to emerge, and notification timelines may vary. Xsolis has reported the incident to relevant regulatory bodies, including the HHS Office for Civil Rights.