Phishing attack on healthcare firm Xsolis impacts 1.4 million people

Xsolis, a healthcare technology provider serving over 600 hospitals and insurers, confirmed a targeted phishing attack on January 20, 2026 that led to unauthorized access to parts of its environment and the exposure of files affecting 1,396,519 individuals. The company says the data may include PII and medical information, has engaged external cybersecurity experts, reported the incident to law enforcement, implemented additional security measures, and is notifying affected individuals while offering credit monitoring and identity protection services.