Skip to content
Tech News
← Back to articles

Healthtech firm Xolis suffers data breach impacting 1.4 million people

read original more articles
Why This Matters

The data breach at healthcare tech firm Xolis highlights the ongoing cybersecurity risks faced by healthtech companies, potentially exposing sensitive patient information and undermining trust in digital health solutions. This incident underscores the importance of robust security measures to protect critical health data and maintain consumer confidence in digital healthcare services.

Key Takeaways

Healthcare technology company Xsolis says that sensitive data belonging to nearly 1.4 million individuals was compromised in a phishing attack that gave attackers access to its network.

Although the company is not aware of any attempted misuse of the exposed information, it is warning affected individuals to stay alert for potential targeted attacks.

Xsolis is a U.S.-based healthcare firm that develops AI-powered software used by more than 600 hospitals and health insurers for utilization management, medical necessity reviews, patient status determinations, discharge planning, and reimbursement decisions.

Its flagship platform, Dragonfly, analyzes clinical data in real time to help healthcare providers and payers make more informed, consistent decisions on patient care and insurance coverage.

On January 22, the company detected unauthorized activity on its network due to a "targeted phishing attack" that had occurred two days earlier.

Xsolis says that it took immediate action to contain the breach and launched an investigation with support from external cybersecurity experts.

“On January 22, 2026, Xsolis became aware of unauthorized activity impacting a limited portion of the Xsolis environment resulting from a targeted phishing attack on January 20, 2026,” Xolis says.

“We immediately contained the activity and launched an investigation with the assistance of external cybersecurity experts.”

The investigation found that the attackers had accessed certain files within the Xsolis environment containing customer information, including:

Names

... continue reading