Xsolis, Inc.

Xsolis, Inc. Provides website notice for Data Security Incident

Xsolis, Inc. (“Xsolis”), a vendor that provides case and utilization management services to healthcare organizations, is providing notice of a recent data security incident that may have involved certain personal and protected health information provided to us by our clients.

On January 22, 2026, Xsolis became aware of unauthorized activity impacting a limited portion of the Xsolis environment resulting from a targeted phishing attack on January 20, 2026. We immediately contained the activity and launched an investigation with the assistance of external cybersecurity experts. The investigation determined that an unauthorized actor acquired certain files containing information that, depending on the individual, may include names, addresses, date of birth, health insurance information, Social Security numbers, and medical treatment information. We are not aware of any actual or attempted misuse of information because of this incident.

We have taken steps to address the incident and are committed to protecting the information entrusted to us. Upon learning of this incident, we immediately began an investigation and reported the incident to law enforcement. We also implemented additional safeguards to further enhance the security of information in our possession and to help prevent similar incidents from occurring in the future.

Additionally, we will be mailing notice letters to potentially affected individuals for whom we have address information. The letters will include information about this incident and steps that individuals can take to monitor and help protect their information, including access to free credit monitoring and identity protection services. Additional steps that individuals may take to monitor and protect their information are also included below. 

We have also established a toll-free call center to answer questions about the incident, provide access to free credit monitoring and identity protection services for eligible potentially affected individuals, and address related concerns. The call center is available Monday through Friday, between 8:00 a.m. and 5:30 p.m. Central Time, excluding major U.S. holidays and can be reached at (844) 403-4585.

In general, we encourage individuals to remain vigilant against incidents of identity theft and fraud by reviewing credit reports/account statements and explanation of benefits forms for suspicious activity and to detect errors. Under U.S. law, individuals are entitled to one free credit report annually from each of the three major credit reporting bureaus, TransUnion, Experian, and Equifax. To order your free credit report, visit www.annualcreditreport.com or call 1-877-322-8228.
 

Individuals have the right to place an initial or extended fraud alert on a credit file at no cost. If individuals are a victim of identity theft, they are entitled to an extended fraud alert lasting seven years. As an alternative to a fraud alert, they have the right to place a credit freeze on a credit report. The credit freeze is designed to prevent credit, loans, and services from being approved without consent. Pursuant to federal law, individuals cannot be charged to place or lift a credit freeze on your credit report.

Should you wish to place a fraud alert or credit freeze, please contact the three major credit reporting bureaus listed below:

You can further educate yourself regarding identity theft, fraud alerts, credit freezes and the steps you can take to protect your personal information by contacting the credit reporting bureaus, the Federal Trade Commission (FTC), or your state Attorney General. The FTC also encourages those who discover that their information has been misused to file a complaint with them. The FTC may be reached at 600 Pennsylvania Ave. NW, Washington, D.C. 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. Instances of known or suspected identity theft should also be reported to law enforcement, your state Attorney General, and the FTC.