Xsolis breach affected 1,396,519 of its clients’ patients

Xsolis, a healthcare business associate, disclosed a January 22, 2026 targeted phishing attack that compromised files containing patient names, addresses, dates of birth, health insurance details, Social Security numbers, and medical treatment information for about 1.4 million individuals; the company contained the incident, reset passwords, increased monitoring, implemented additional security measures, and offered affected patients identity monitoring, while no ransom demand or confirmed misuse has been reported.