Healthcare Vendor Xsolis Reports Breach Affecting 1.4M People

Xsolis reported a targeted phishing intrusion beginning Jan 20, 2026 that led to unauthorized access and exfiltration of files containing names, addresses, dates of birth, Social Security numbers, insurance and medical treatment information for about 1,396,519 individuals; the company isolated affected systems, reset credentials, engaged external responders, and is offering 12 months of identity-monitoring services.