AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
Xsolis Healthcare Data Breach
Coverage from DistilINFO, Becker's Hospital Review, and others
In January 2026, a targeted phishing attack gave an unauthorized party access to part of Xsolis’s systems, where files received from healthcare customers were stored.
The potentially exposed information included personal identifiers, insurance details, and medical treatment information. Xsolis investigated and contained the activity, reported it to law enforcement, and offered identity-protection services. Healthcare organizations including Mayo Clinic and VHC Health issued notices to potentially affected patients, while federal reporting listed 1,396,519 affected individuals. Legal inquiries have also examined possible remedies for people whose information was involved.
Looking Back
38 Day Timeline
Jun 8
Jun 14
Jun 20
Jun 27
Jul 3
Jul 9
Jul 15
History
10/03/2026
The current version largely confirms the previously reported breach details. It adds that healthcare clients issued their own patient notices, without changing the known scope or impact.
All Articles32 articles
Important
NYC Health + Hospitals disclosed a Solventum business associate breach in 2026 exposing protected health information for 58,778 patients after dark-web posting.
7/15/2026 • Data Breaches & Exposure Events • General
NYC Health + Hospitals disclosed a Solventum business-associate breach affecting 58,778 patients after unauthorized protected health information access on or around March 29, 2026.
7/14/2026 • Data Breaches & Exposure Events • General
Class actions filed in Tennessee allege CareNow tracking disclosures and an XSolis Jan. 20 network breach exposed patient PII and PHI, including Social Security numbers.
7/7/2026 • Regulation, Law & Enforcement • General
Xsolis reported a phishing-driven breach to HHS Office for Civil Rights, affecting 1,396,519 people, with exposure of protected health information.
6/25/2026 • Data Breaches & Exposure Events • General
Xsolis disclosed a Jan 22 2026 targeted phishing breach affecting 1.4 million people, reporting containment and no misuse, with downstream notices from major healthcare providers.
6/24/2026 • Data Breaches & Exposure Events • General
Xsolis disclosed a January 2026 phishing-driven data breach in Tennessee affecting 1,396,519 people by exposing personal and protected health information.
6/23/2026 • Data Breaches & Exposure Events • General
Xsolis disclosed a January 20 phishing breach that Xsolis detected on January 22, exposing sensitive patient data for Mayo Clinic and other healthcare customers.
6/16/2026 • Data Breaches & Exposure Events • General
Xsolis, a Tennessee healthcare technology vendor, disclosed a Jan. 22 phishing-driven breach affecting client patient data in the United States, with VHC Health notifying Virginia patients.
6/15/2026 • Data Breaches & Exposure Events • General
Xsolis disclosed unauthorized access from a targeted phishing attack on Jan. 20, 2026, exposing sensitive data for 1,396,519 individuals in the United States.
6/24/2026 • Data Breaches & Exposure Events • General
Xsolis disclosed a healthcare data breach on January 22 after a Jan 20 phishing attack, with HHS reporting 1,396,519 affected individuals.
6/23/2026 • Data Breaches & Exposure Events • General
Xsolis disclosed a January phishing-driven breach later reported in early June, impacting 1.4 million people with exposed personal and protected health information.
6/23/2026 • Data Breaches & Exposure Events • General
Xsolis disclosed a January 2026 phishing-driven breach affecting 1.4 million individuals after theft of customer identity and health insurance data.
6/23/2026 • Data Breaches & Exposure Events • General
NYC Health + Hospitals notified federal and state regulators after Solventum disclosed unauthorized access to patient PHI around March 29, 2026.
7/15/2026 • Data Breaches & Exposure Events • General
Xsolis disclosed a Jan. 20 unauthorized-access event after a June 5 phishing attack, reporting 1.4 million affected individuals to HHS in the US.
7/2/2026 • Data Breaches & Exposure Events • General
Xsolis reported a January 2026 phishing-driven breach affecting 1.4 million people, exposing patient records and leading to class-action efforts in Tennessee and nationwide.
6/24/2026 • Data Breaches & Exposure Events • General
Xsolis disclosed a January 2026 phishing-based intrusion that exposed patient records, potentially including Social Security numbers, for up to 1.4 million individuals.
6/24/2026 • Data Breaches & Exposure Events • General
Xsolis reported a phishing-led intrusion in January 2026 that exposed patient data for up to two days, with potential identity theft risk and possible court remedies.
6/24/2026 • Data Breaches & Exposure Events • General
Interesting
Xsolis reported a healthcare AI vendor breach in June 2026 after phishing access on January 20 exposed at least 1.4 million patient records across eight U.S. health systems.
7/2/2026 • Data Breaches & Exposure Events • General
Xsolis disclosed a June 5 phishing-related breach after Jan. 20 unauthorized IT access affected 1.4 million patients across multiple health systems, with HHS posting results on June 22.
7/2/2026 • Data Breaches & Exposure Events • General
Xsolis notified law enforcement and announced a January 2026 targeted phishing breach after detecting unauthorized access on January 22.
6/23/2026 • Data Breaches & Exposure Events • General
Xsolis reported a phishing-driven unauthorized-access incident on January 20 affecting 1.4 million individuals, with HHS posting the figure on June 22.
6/23/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood initiated an investigation of the Xsolis data breach reported to the Texas Attorney General affecting about 26,700 Texas residents.
6/23/2026 • Data Breaches & Exposure Events • General
Xsolis disclosed a targeted phishing incident around January 22, 2026, involving potential unauthorized access to personal and protected health information, and offered identity monitoring via Kroll.
6/22/2026 • Data Breaches & Exposure Events • General
Edelson Lechtzin LLP began investigating potential class action claims after Xsolis discovered unauthorized activity from a January 2026 phishing attack affecting at least 1.4 million individuals.
6/22/2026 • Data Breaches & Exposure Events • General
Edelson Lechtzin LLP says it is investigating a Xsolis, Inc. phishing-triggered data breach discovered on January 22, 2026, possibly affecting 1.4 million people.
6/22/2026 • Data Breaches & Exposure Events • General
Xsolis disclosed a January 2026 phishing-based incident exposing personal and protected health information, with patient notices and identity monitoring offered to eligible individuals.
6/16/2026 • Data Breaches & Exposure Events • General
VHC Health notified patients on June 5 about a Jan. 22 Xsolis, Inc. phishing-related vendor breach that may have exposed Social Security numbers, medical diagnoses, and account numbers.
6/11/2026 • Data Breaches & Exposure Events • General
Xsolis, Inc. disclosed on June 5, 2026 that a phishing attack in January 2026 led to acquisition of sensitive personal information and protected health information.
6/9/2026 • Data Breaches & Exposure Events • General
T.A. Solberg Co. Inc. disclosed an unauthorized access incident impacting consumers in 2026 regulator notices, involving Social Security, identity, and health data exposure.
7/6/2026 • Data Breaches & Exposure Events • General
Xsolis detected targeted phishing-based unauthorized access on January 22, 2026, after an attack on January 20, and notified 1,396,519 impacted individuals.
6/23/2026 • Data Breaches & Exposure Events • General
Xsolis disclosed a Jan. 20, 2026 phishing breach affecting personal and health data provided by healthcare clients, offering credit monitoring for eligible individuals.
6/8/2026 • Data Breaches & Exposure Events • General
Mayo Clinic said an April 23 third-party vendor incident at Xsolis may have affected some patient information, with Xsolis notifying affected patients.
6/22/2026 • Data Breaches & Exposure Events • General