‘Unauthorized Actor’ Breaches Healthcare Tech Firm – Personal and Medical Data of 1,396,519 Americans Now at Risk

A data breach that targeted a Tennessee-based healthcare technology firm enabled cybercriminals to access the sensitive information of at least 139,6519 individuals.

Xsolis says a data security incident that occurred in January may have compromised certain personal and protected information provided by its clients. The company provides patient care and utilization management services to healthcare providers using AI technology.

“On January 22, 2026, Xsolis became aware of unauthorized activity impacting a limited portion of the Xsolis environment resulting from a targeted phishing attack on January 20, 2026.”

An investigation assisted by external cybersecurity experts determined that an unauthorized actor acquired certain files that contain names, addresses, date of birth, health insurance information, Social Security numbers and medical treatment information.

Xsolis says it is not currently aware of any misuse of information related to the incident but it is  providing free credit monitoring and identity protection services to affected individuals.

“We have also established a toll-free call center to answer questions about the incident…The call center is available Monday through Friday, between 8:00 a.m. and 5:30 p.m. Central Time, excluding major U.S. holidays and can be reached at (844) 403-4585.”

The firm says it reported the incident to law enforcement authorities and implemented additional safeguards to secure information in its possession to prevent similar incidents from happening in the future.

Generated Image: Midjourney