Healthtech firm Xolis suffers data breach impacting 1.4 million people

Xsolis disclosed that a targeted phishing attack on January 20, 2026 led to unauthorized access to certain files in its environment containing sensitive customer and patient information (names, addresses, dates of birth, health insurance details, Social Security numbers, and medical treatment information) impacting about 1,396,519 individuals; the company contained the incident, engaged external cybersecurity experts and law enforcement, reset passwords, enhanced monitoring and security controls, and is notifying affected people and offering identity monitoring services.