Xsolis Healthcare AI Platform Hit by Phishing Attack, Exposing Sensitive Patient Data
On January 22, 2026, Xsolis a provider of AI-driven case management services for healthcare organizations detected unauthorized activity on its network stemming from a phishing attack that occurred two days prior. The breach compromised files containing highly sensitive patient information, including names, addresses, dates of birth, health insurance details, Social Security numbers, and medical treatment records. The exposed data varied by individual.
Xsolis’s Dragonfly platform is widely used by over 600 hospitals and healthcare systems, including major institutions like Advent Health, Mayo Clinic, and Honor Health. The company has begun notifying affected individuals via mail.
The incident highlights the growing risk of phishing attacks targeting healthcare infrastructure, where AI-driven platforms manage vast amounts of protected health information. Legal investigations are underway to assess potential class action lawsuits on behalf of impacted individuals, focusing on privacy violations, financial losses, and other damages. No further details on the scope of affected patients or the attacker’s identity have been disclosed.
Source: https://www.classaction.org/data-breach-lawsuits/xsolis-june-2026
Xsolis cybersecurity rating report: https://www.rankiteo.com/company/xsolis
HonorHealth cybersecurity rating report: https://www.rankiteo.com/company/honorhealth
AdventHealth cybersecurity rating report: https://www.rankiteo.com/company/adventhealth
Mayo Clinic cybersecurity rating report: https://www.rankiteo.com/company/mayo-clinic
"id": "XSOHONADVMAY1780958028",
"linkid": "xsolis, honorhealth, adventhealth, mayo-clinic",
"type": "Breach",
"date": "1/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Over 600 hospitals and '
'healthcare systems, including '
'Advent Health, Mayo Clinic, and '
'Honor Health',
'industry': 'Healthcare',
'name': 'Xsolis',
'type': 'Healthcare AI Platform Provider'}],
'attack_vector': 'Phishing',
'customer_advisories': 'Notifying affected individuals via mail',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Addresses',
'Dates of birth',
'Health insurance details',
'Social Security numbers',
'Medical treatment records']},
'date_detected': '2026-01-22',
'description': 'On January 22, 2026, Xsolis detected unauthorized activity on '
'its network stemming from a phishing attack that occurred two '
'days prior. The breach compromised files containing highly '
'sensitive patient information, including names, addresses, '
'dates of birth, health insurance details, Social Security '
'numbers, and medical treatment records. The exposed data '
'varied by individual. Xsolis’s Dragonfly platform is widely '
'used by over 600 hospitals and healthcare systems, including '
'major institutions like Advent Health, Mayo Clinic, and Honor '
'Health. The company has begun notifying affected individuals '
'via mail.',
'impact': {'data_compromised': 'Sensitive patient information, including '
'names, addresses, dates of birth, health '
'insurance details, Social Security numbers, '
'and medical treatment records',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action lawsuits focusing on '
'privacy violations and financial losses',
'systems_affected': 'Xsolis Dragonfly AI platform'},
'investigation_status': 'Ongoing',
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuits'},
'response': {'communication_strategy': 'Notifying affected individuals via '
'mail'},
'title': 'Xsolis Healthcare AI Platform Hit by Phishing Attack, Exposing '
'Sensitive Patient Data',
'type': 'Data Breach'}