Xsolis Data Breach Exposes PHI for 1.4 Million via Phishing

A healthcare technology company called Xsolis has disclosed that a phishing attack in January 2026 allowed unauthorized access to files containing personal information and protected health information for 1,396,519 individuals.

Phishing Attack Details

According to public reporting, the breach occurred when attackers used targeted phishing to gain entry into Xsolis systems. The company, which works with hospitals and health payers, had received the sensitive files from its clients. The exposed data includes names, Social Security numbers, medical records, and other protected health information. SecurityWeek and BleepingComputer both reported that no ransomware group claimed responsibility and that Xsolis has found no evidence the information has been misused so far. The company notified affected individuals and regulatory authorities as required by law.

Why Health Data Is Valuable

This incident matters because your medical history, Social Security number, and personal details are among the most valuable pieces of information to identity thieves. Once criminals have your health records and SSN, they can open accounts in your name, file fraudulent tax returns, or sell the data on underground markets. For you and your family, the breach creates years of potential risk because health data does not expire the way a credit card number does. Children’s records are especially concerning since their identities often go unmonitored for long periods, giving thieves a clean slate to build fraudulent histories.

Doxxing and Identity Risks

The doxxing and identity-chain implications are serious. A single leak like this frequently cascades across platforms. Criminals combine the exposed email addresses, phone numbers, and SSNs with usernames found on gaming sites, social media, or older breaches. This creates a detailed map linking your online handles to your real identity, address, and family members. What begins as a healthcare breach can lead to account takeovers on email, banking, or gaming services, followed by harassment, extortion, or further leaks of private information.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real identity so you can see the full exposure chain created by this breach.
• Rotate every password you reused at Xsolis or any connected healthcare provider, then replace it with a unique passphrase and enable two-factor authentication using an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next time your information appears for sale you learn about it within hours instead of months.
• Cover your entire household with DoxxScan family protection, which includes dependents and your children’s gaming accounts that often chain back to the same addresses and family names exposed in healthcare records.
• Let DoxxScan remediation specialists handle the time-consuming work of sending takedown requests to data brokers and monitoring the results for you.

The Xsolis breach is a reminder that your family’s most sensitive records can be exposed through no fault of your own, but you can still limit the damage by acting quickly and systematically. Start your DoxxScan trial today and put continuous monitoring, identity-chain mapping, and hands-on remediation specialists to work protecting you and your family, including gaming accounts that are often the next link in the doxxing chain.