Xsolis Data Breach Affects Nearly 1.4 Million People
Summary
Xsolis disclosed that a phishing attack led to access to files containing personal and health information. HHS lists 1,396,519 affected individuals; Xsolis says it is unaware of any actual or attempted misuse.
Key points
- Xsolis said it detected unauthorized activity on its systems on January 22 after a targeted phishing attack two days earlier.
- The company said attackers accessed files containing names, dates of birth, addresses, Social Security numbers, health insurance information, and medical treatment information.
- HHS added the incident to its breach tracker, listing 1,396,519 affected individuals.
- Xsolis said it was unaware of any actual or attempted misuse of the information.
Article Details
- Victim Organization
- Xsolis, Inc.
- Incident Type
- Targeted phishing attack followed by unauthorized access to files containing personal and protected health information
- Data Types Exposed
- Names
- Dates of birth
- Addresses
- Social Security numbers
- Health insurance information
- Medical treatment information
- Affected Records
- 1,396,519 individuals
- Operational Impact
- Unauthorized access to files storing personal and protected health information received from Xsolis clients. No service disruption is reported. Xsolis said it was not aware of actual or attempted misuse of the information.
- Ransom Or Extortion
- No known ransomware group appears to have claimed responsibility. Whether Xsolis faced an extortion attempt or paid a ransom was not disclosed in the article.
- Claim Status
- confirmed