# SZB-6f72a161a5: Xsolis reports phishing-linked breach affecting nine health systems

Xsolis reported a targeted phishing attack on June 5 and said an unauthorized person accessed portions of its IT systems on Jan.

- Type: Breach
- Status: Confirmed
- Vendor: Xsolis
- Disclosed: 2026-11-03 20:02 UTC
- Data taken: 1.4M records
- Way in: Phishing or social engineering (DataBreaches.net: “Xsolis, which provides utilization management and care coordination technology for health systems, reported the targeted phishing attack June 5, noting that on…”, [source](https://wordpress-1685287-6764806.cloudwaysapps.com/2026/11/03/nine-health-systems-affected-by-ai-company-data-breach/))
- Sources: 1 distinct
- First seen by cve.now: 2026-11-03 20:46 UTC · Updated: 2026-11-03 22:20 UTC

Written by a model from the sources below. Verify against them.

## Summary

20. DataBreaches.net reports that at least nine health systems and 1.4 million patients are affected.

## What to do

- Ask your health system whether your patient data was included
- Watch for phishing messages that reference medical billing or care coordination
- Monitor credit and medical billing statements for unfamiliar activity

## Timeline

- 2026-11-03 20:02 UTC: Made public by DataBreaches.net
- 2026-11-03 20:02 UTC: Confirmed by Xsolis. DataBreaches.net: “Xsolis, which provides utilization management and care coordination technology for health systems, reported the targeted phishing attack June 5, noting that on…” ([source](https://wordpress-1685287-6764806.cloudwaysapps.com/2026/11/03/nine-health-systems-affected-by-ai-company-data-breach/))
- 2026-11-03 20:46 UTC: First seen by cve.now

## What was taken

1.4M records, per [DataBreaches.net](https://wordpress-1685287-6764806.cloudwaysapps.com/2026/11/03/nine-health-systems-affected-by-ai-company-data-breach/).

## Evidence (1 source)

- 2026-11-03 · Press · [DataBreaches.net](https://wordpress-1685287-6764806.cloudwaysapps.com/2026/11/03/nine-health-systems-affected-by-ai-company-data-breach/): “A data breach involving healthcare AI company Xsolis has ensnared at least nine health systems and 1.4 million patients.” (+1 more: [DataBreaches.net](https://databreaches.net/2026/11/03/nine-health-systems-affected-by-ai-company-data-breach/))

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-6f72a161a5&body=https%3A%2F%2Fcve.now%2FSZB-6f72a161a5%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about the Xsolis breach

### Was Xsolis breached?

Yes. Xsolis says so: “Xsolis, which provides utilization management and care coordination technology for health systems, reported the targeted phishing attack June 5, noting that on Jan. 20 an unauthorized person accessed portions of the company’s IT environment and acquired a “limited number” of files.” (DataBreaches.net).

Source: https://wordpress-1685287-6764806.cloudwaysapps.com/2026/11/03/nine-health-systems-affected-by-ai-company-data-breach/

### What data was exposed?

1.4M records.

### What should Xsolis customers do?

Ask your health system whether your patient data was included. Watch for phishing messages that reference medical billing or care coordination. Monitor credit and medical billing statements for unfamiliar activity.

## Related

- Started as early warning SZB-6f72a161a5, first seen 2026-11-03 20:46 UTC
- Browse: [Breaches](https://cve.now/breaches.md) · [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/SZB-6f72a161a5
Site guide for agents: https://cve.now/llms.txt