DataBreaches.Net

The Office of Inadequate Security

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Nine health systems affected by AI company data breach

Posted on November 3, 2026 by Dissent

Giles Bruce reports:

A data breach involving healthcare AI company Xsolis has ensnared at least nine health systems and 1.4 million patients.

Xsolis, which provides utilization management and care coordination technology for health systems, reported the targeted phishing attack June 5, noting that on Jan. 20 an unauthorized person accessed portions of the company’s IT environment and acquired a “limited number” of files. The company told HHS on June 5 that 1.4 million individuals were affected by the breach, a number the agency posted June 22.

[…]

Here are the health systems reportedly affected by the data breach:

  • Erie County Medical Center (Buffalo, N.Y.)
  • Mayo Clinic (Rochester, Minn.)
  • UW Medicine (Seattle)
  • Legacy Health (Portland, Ore.)
  • VHC Health (Arlington, Va.)
  • Rochester (N.Y.) Regional Health
  • Carle Health (Urbana, Ill.)
  • Augusta Health (Fishersville, Va.)
  • Hendrick Health (Abilene, Texas)

Read more at Becker’s Health IT.

Category: Commentaries and AnalysesHealth DataPhishingSubcontractorU.S.

Post navigation

← JPN: More companies seeking cyber insurance following high-profile data breaches
Ukraine and Russia both report fake emergency alerts after cyberattacks target apps as limited ceasefire ends →

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Search by Keyword or Name

Browse by Categories

DataBreaches.net’s RSS Feed

Grab it at: https://databreaches.net/feed/

Recent Posts

  • Ukraine and Russia both report fake emergency alerts after cyberattacks target apps as limited ceasefire ends
  • Nine health systems affected by AI company data breach
  • JPN: More companies seeking cyber insurance following high-profile data breaches
  • KR: Presidential office holds emergency meeting over leak of personal data of president, trip entourage
  • Syrian Man Sentenced for Wide-Ranging Hacking Conspiracy Conducted on Behalf of the Bashar Al Assad Regime
  • A Defense Contractor Gave Their Personal AI Agent Access to a Secure Pentagon System
  • Hackers hit UNM hospital, then apologize and offer patients $2,500. In a new statement, they reveal more about the incident.
  • HHS’ Office for Civil Rights Settles Ransomware Investigation of Lehigh Valley Health Network
  • UK: Second Liverpool hospital investigates staff over breach of Southport attack patient records
  • CSX data breach exposes employee information

RSS feed: Recent Posts on PogoWasRight.org Recent Posts on PogoWasRight.org

  • Loblaw commits to strengthening security measures following privacy breach
  • Privacy Rights Can’t Be Left in the Rearview: Attorney General Bonta Secures $1.8 Million Settlement with Lyft
  • A RIZAP Employee Uploaded 726 People’s Health Records to a Personal AI Chat
  • Snapshot for Healthcare Employers: What AI Glasses Mean for Patient Privacy and Recording Consent
  • Oregon Attorney General Rayfield Leads States in $220M Settlement With GM Over Sale of Drivers’ Private Data

Threats Researchers and Journalists Face

Survey Results:

Under Pressure: Exploring the effect of legal and criminal threats on security researchers and journalists.

Available in html  and pdf.

Contact DataBreaches.net

Security Issue?
Signal: Dissent.73

News Tip?
Signal: Dissent.73

Mastodon: Infosec.Exchange/@PogoWasRight

Threats?
Please take a number and wait your turn.
© 2009 – 2026 DataBreaches.net and DataBreaches LLC. All rights reserved.