Nine health systems affected by AI company data breach
A phishing attack on healthcare AI company Xsolis, discovered in January and disclosed in June, exposed data belonging to at least 1.4 million patients across nine health systems. Xsolis provides utilization management and care coordination tools to hospitals and health networks.
Why this matters: When a vendor gets breached, every organization that trusted it with patient data gets pulled in too. That is what happened here. Nine health systems did not get hacked directly — they just hired the same company. Patients had no say in that decision and no way to know their data sat at Xsolis. Healthcare data is among the most sensitive information that exists. The five-month gap between the attack and public disclosure is the part worth watching.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.