Healthcare technology company Xsolis says that sensitive data belonging to nearly 1.4 million individuals was compromised in a phishing attack that gave attackers access to its network.
Although the company is not aware of any attempted misuse of the exposed information, it is warning affected individuals to stay alert for potential targeted attacks.
Xsolis is a U.S.-based healthcare firm that develops AI-powered software used by more than 600 hospitals and health insurers for utilization management, medical necessity reviews, patient status determinations, discharge planning, and reimbursement decisions.
Its flagship platform, Dragonfly, analyzes clinical data in real time to help healthcare providers and payers make more informed, consistent decisions on patient care and insurance coverage.
On January 22, the company detected unauthorized activity on its network due to a "targeted phishing attack" that had occurred two days earlier.
Xsolis says that it took immediate action to contain the breach and launched an investigation with support from external cybersecurity experts.
“On January 22, 2026, Xsolis became aware of unauthorized activity impacting a limited portion of the Xsolis environment resulting from a targeted phishing attack on January 20, 2026,” Xolis says.
“We immediately contained the activity and launched an investigation with the assistance of external cybersecurity experts.”
The investigation found that the attackers had accessed certain files within the Xsolis environment containing customer information, including:
Names
... continue reading