Xsolis, Inc. Reports Data Security Incident
Xsolis, Inc., a provider of healthcare management services, has announced a recent data security incident that raises concerns regarding the personal and protected health information of certain individuals. The company's proactive response to the situation highlights their commitment to transparency and the safety of their clients.
Incident Overview
On January 22, 2026, Xsolis became aware of unauthorized activity within its system, which was identified as stemming from a targeted phishing attack that occurred two days prior, on January 20, 2026. Upon recognition of the breach, Xsolis promptly took steps to mitigate the situation. This included halting unauthorized access, isolating impacted accounts and hosts, and launching a thorough investigation.
The internal investigation revealed that an unauthorized actor had acquired access to some files during the time of the breach. Thankfully, as of the date of this notice, Xsolis reported that they are not aware of any actual or attempted misuse of the compromised information, and there has been no unauthorized activity reported since January 22, 2026.
Information Potentially Compromised
The potentially affected information may include:
- - Names and addresses
- - Dates of birth
- - Health insurance information
- - Social Security numbers
- - Medical treatment data
Response and Recovery
Following the incident, Xsolis engaged top-tier external cybersecurity experts to assist in their investigation. They also notified law enforcement officials and are collaborating with them as part of the ongoing inquiry. Xsolis has been diligently assessing its security protocols to ensure compliance with industry standards and implemented additional measures to bolster their data and network security.
In an effort to support those who may be impacted by the breach, Xsolis is offering complimentary identity monitoring services. This includes credit monitoring, fraud consultation, and identity theft restoration services, available at no cost to individuals who receive notification letters regarding the incident.
Recommended Actions for Affected Individuals
Xsolis advises anyone who might be affected to stay vigilant. This includes regularly reviewing account statements, benefits explanation statements, and credit reports. Eligible individuals will find instructions in their notification letters on how to enroll in the free identity monitoring services via their dedicated link. For further inquiries, a dedicated assistance line has been established at (844) 403-4585, available Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time (excluding major U.S. holidays).
Commitment to Security
Xsolis takes the confidentiality and security of the information entrusted to them very seriously. They deeply regret any distress this incident may cause to their clients and are committed to rectifying the situation and enhancing their security measures. For additional information, individuals can reach out to the dedicated assistance line or visit their incident-specific website at www.xsolisdataincident.com.
As cyber threats continue to evolve, organizations like Xsolis are reminded of the importance of robust security measures and the need for transparency in the face of such incidents. By taking immediate actions and offering support, Xsolis aims to regain the trust of those affected and ensure a more secure environment in the future.