{"meta":{"database":"Global Social Engineering Impact Database","license":"CC BY 4.0 — attribute to Netarx Social Engineering Incident Database","url":"https://global-social-engineering-impact-da.vercel.app/incidents/2026-phishing-attack-on-healthcare-ai-firm-xsolis-exposes-1-4-million-patient"},"incident":{"slug":"2026-phishing-attack-on-healthcare-ai-firm-xsolis-exposes-1-4-million-patient","title":"Phishing attack on healthcare AI firm Xsolis exposes 1.4 million patients","date":"2026-01-20","date_precision":"day","year":2026,"victim_org":"Xsolis","sector":"Healthcare","country":"United States","primary_vector":"Spear Phishing (Email)","secondary_vectors":[],"ai_involvement":"No AI reported","ai_notes":"","outcomes":["Data Breach","Credential Theft"],"loss_usd":null,"loss_kind":null,"loss_note":"","records_affected":1396519,"threat_actor":null,"summary":"Nashville-based healthcare AI company Xsolis, whose utilisation-management platform is used by payers and health systems, suffered a targeted phishing attack on 20 January 2026 and detected the unauthorised activity two days later. Files containing names, addresses, dates of birth, Social Security numbers, health insurance details and treatment information were taken. 1,396,519 individuals were reported affected to HHS. No group claimed responsibility.","how_it_worked":"Xsolis described the entry point as a targeted phishing attack against its own staff rather than an exploited vulnerability. The attacker reached an employee mailbox or account and, over roughly a two-day window before detection on 22 January, accessed and copied files holding protected health information belonging to patients of Xsolis's health system and payer customers. The company has not published the pretext used, the sender identity spoofed, or whether MFA was bypassed.","lessons":"Phishing-resistant MFA on email and any admin console, plus data-loss monitoring on bulk file access to PHI repositories, is what converts a successful lure into a contained account compromise.","confidence":"Confirmed","sources":[{"title":"Phishing attack on healthcare firm Xsolis impacts 1.4 million people","url":"https://www.helpnetsecurity.com/2026/06/24/xsolis-data-breach-phishing-attack/","publisher":"Help Net Security"},{"title":"Xsolis Data Breach Affects 1.4M Individuals","url":"https://www.hipaajournal.com/xsolis-data-breach/","publisher":"HIPAA Journal"}],"entry_type":"incident","url":"https://global-social-engineering-impact-da.vercel.app/incidents/2026-phishing-attack-on-healthcare-ai-firm-xsolis-exposes-1-4-million-patient"}}