Xsolis Breach Exposes 1.4M Patient Records

Xsolis, a healthcare AI platform used by Humana and over 600 hospitals and health organizations, has disclosed a major data breach affecting 1,396,519 individuals. The breach resulted from a targeted phishing attack on January 20, 2026, which Xsolis discovered two days later.

The exposed data includes names, Social Security numbers, health insurance information, and medical treatment records. The breach affected patients across at least seven major hospital systems that use Xsolis for AI-powered case management and utilization review.

Xsolis is not a household name, but it sits in a critical infrastructure position: its AI analyzes patient data to help hospitals and insurers make decisions about care authorization and length of stay. This makes the breach particularly concerning — the compromised data is not just identity information, but detailed clinical data that could be used for medical identity theft, insurance fraud, or extortion.

The breach follows a disturbing pattern in 2026 of attacks on healthcare-adjacent technology vendors. Earlier this year, Iranian hackers remotely wiped tens of thousands of devices at Stryker, a major medical technology company, causing material financial impact. The ShinyHunters group breached Instructure's Canvas LMS, compromising data of over 30 million students.

The Xsolis incident highlights a systemic risk in healthcare: AI vendors that process sensitive patient data are now priority targets. Many of these vendors are relatively young companies that grew rapidly during the AI boom, and their security maturity may not match the sensitivity of the data they hold.