A phishing attack on Xsolis led to a data breach affecting nearly 1.4 million individuals. Here’s what happened, what information was involved, and what you can do to reduce risk.
Table of Contents
What Happened?
The company discovered unauthorized activity on January 22, 2026, and later determined that hackers had gained access to sensitive files following a targeted phishing attack that began on January 20.
Xsolis provides healthcare management and billing-related services for hospitals, health systems, and insurance providers.
The company said the attackers accessed files containing information it had received from its clients.
The incident was added to the U.S. Department of Health and Human Services (HHS) data breach tracker on June 23, 2026, confirming the number of affected individuals.
Xsolis reported the incident to law enforcement and said it was not aware of any misuse of the stolen information.
Who Was Affected and What Data Was Leaked?
The breach affected 1,396,519 people whose information Xsolis had received from healthcare organizations and health insurers.
According to the company, the stolen information may include:
- Names
- Dates of birth
- Home addresses
- Social Security numbers
- Health insurance information
- Medical treatment information
The company is also offering free credit monitoring and identity protection services to eligible people.
Information such as Social Security numbers, health insurance details, and medical records helps criminals impersonate you or make phishing messages seem more convincing.
Many people focus on large breaches in the news, but they may not realize their data was also affected in other incidents.
If you are not sure whether your information was leaked somewhere online, automatic monitoring can help you spot problems earlier.
Futureproof monitors your data for leaks 24/7 and helps you reduce scam risks with simple, clear steps.
How a Phishing Attack Led to the Xsolis Breach
Xsolis said the breach began with targeted phishing on January 20, 2026.
Phishing is a fake email or message designed to trick a person into sharing access or opening a harmful link.
The company has not shared the exact phishing message or explained what action gave the attackers access.
After gaining access, the attackers entered part of the Xsolis system and acquired a limited number of files.
Xsolis said it isolated the affected computers and user accounts. The company reported no further unauthorized activity after January 22.
Futureproof scans your data for leaks and shows exactly how to close security gaps — before scammers find them first.
Check my safetyWhy Stolen Health Data Can Affect You for Years
Medical and insurance information may support targeted fraud, false medical claims, and impersonation attempts.
A criminal could mention your insurer, treatment, or personal details to make a call or email sound legitimate. That makes careful verification especially important after a healthcare data breach.
The Xsolis breach is far from an isolated case. As of September 2025, phishing was linked to 16% of reported healthcare data breaches, making it the most common way attackers gained access.
The same year, healthcare organizations reported a record 772 large data breaches to HHS regulators.
That means the risk is not limited to one company or incident. Health data can be exposed across the industry and later used for fraud or impersonation.
5 Steps to Protect Yourself After the Xsolis Data Breach
These simple steps can help protect your identity, credit, and health insurance information:
1. Read any breach notice carefully
Watch for a letter from Xsolis or a healthcare organization you use. The notice should explain which information may involve you.
That detail matters because your next steps depend on whether your Social Security number or medical information was included.
Use the contact information in the official letter to ask questions. Eligible people should also consider enrolling in the offered monitoring service.
2. Freeze your credit if your Social Security number was involved
Watch for unfamiliar credit checks, new accounts, or bills from companies you do not recognize.
A criminal may use a stolen Social Security number to apply for credit in your name.
Visit Equifax, Experian, and TransUnion directly. Choose the Credit Freeze or Security Freeze option and complete the process with all three bureaus.
A credit freeze is free and blocks most new accounts until you lift it. It does not lower your credit score.
3. Review your health insurance statements
Look for doctors, treatments, equipment, or claims you do not recognize on your Explanation of Benefits statements.
An Explanation of Benefits is a summary from your health insurer. It shows which services were billed, what insurance paid, and what you may owe.
It is usually not a bill. You may receive it by mail or find it in the Claims section of your insurer’s website or app.
Unfamiliar services may be a sign that someone used your insurance information.
Log into your insurer’s website or Medicare.gov and open the Claims section. Call the number on your insurance card if something looks wrong.
4. Watch for messages using medical details
Be careful with unexpected emails, calls, or texts that mention your insurer, treatment, claim, or Social Security number.
Criminals may use stolen details to request money or information seem genuine.
Do not click links or call numbers in an unexpected message. Contact your provider or insurer through its official website or your insurance card.
5. Protect your main email account
Watch for password reset messages or login alerts you did not request.
Your email connects to many other services. Someone with access may reset passwords and enter your other accounts. That is why your email needs strong protection.
Open your email settings and choose Security. Review recent sign-ins, create a strong unique password, and turn on two-step verification. Two-step verification requires a second code after your password.
If setup feels confusing, the Futureproof Email Protection tool guides you through each step.
Email Protection helps you create a strong password and set up two-step verification to secure your account.
Your Medical Information Deserves Long-Term Protection
The Xsolis breach shows that companies you may never interact with directly can still store sensitive details about your healthcare and insurance.
Review breach notices, watch your credit and medical claims, and verify unexpected messages before responding.
Tools like Futureproof can also help you spot leaked information earlier and follow clear steps when a problem appears.
Regular checks can help you act sooner and feel more confident about protecting your identity and personal information.
At Futureproof, Kevin explains digital safety in simple words, with clear tips and zero fluff. He holds a degree in information technology and studies fraud trends to keep his tips up-to-date.
In his free time, Kevin plays with his cat, enjoys board-game nights, and hunts for New York’s best cinnamon rolls.
