Reported to the TX Attorney General on July 23, 2026.
TX residents may qualify for compensation. Free attorney review — no obligation, no upfront cost.
Check My Rights →Xsolis, Inc. was the subject of a data breach notification filed with the TX Attorney General. The AG filing was recorded on July 23, 2026. The breach or discovery date reported in the filing is January 20, 2026.
Xsolis, Inc. operates as a prominent healthcare technology and analytics company, leveraging artificial intelligence and machine learning to optimize the utilization review, clinical appeals, and payer-provider collaboration processes. By bridging the operational divide between hospitals, health systems, and health insurance payers, Xsolis ingests, analyzes, and manages vast quantities of deeply sensitive clinical, demographic, and financial data. The company's platform processes electronic health records, utilization metrics, and proprietary clinical scores to facilitate automated medical necessity determinations. Because of its core operational focus on complex healthcare analytics and revenue cycle management, Xsolis maintains repositories containing some of the most private, highly regulated personal information in the modern digital ecosystem. In 2026, Xsolis, Inc. officially reported a significant security incident to the Office of the Attorney General of Texas, signaling a critical breakdown in its digital defenses. While investigations into sophisticated healthcare data breaches frequently uncover unauthorized access to enterprise databases, third-party software vulnerabilities, or ransomware deployment, incidents targeting health-tech analytics providers typically involve compromised network perimeters or exploited administrative credentials. Given the interconnected nature of healthcare IT infrastructure, a compromise at the vendor level can cascade across multiple client networks, granting external actors unauthorized entry into centralized repositories where massive volumes of aggregated health records and patient identifiers reside. The data compromised in the Xsolis breach encompasses an alarming array of sensitive information, including full names, dates of birth, Social Security numbers, internal medical record identifiers, health insurance policy details, and granular clinical or diagnostic treatment information. The exposure of this specific data combination creates severe, long-term risks for affected individuals. Unlike easily replaceable credit card numbers, immutable medical history, demographic data, and Social Security numbers cannot be altered after a breach. This information provides identity thieves and fraudsters with the exact building blocks required to commit medical identity theft—such as fraudulently billing insurance under a victim's name, obtaining unauthorized prescription drugs, or filing fraudulent tax returns and financial account takeovers. As a technology vendor handling protected health information and personally identifiable information, Xsolis, Inc. was bound by stringent legal obligations under federal and state frameworks, including the Health Insurance Portability and Accountability Act (HIPAA), the Texas Medical Records Privacy Act, and state data breach notification statutes. These laws mandate the implementation of rigorous administrative, physical, and technical safeguards, such as end-to-end encryption, multi-factor authentication, continuous network monitoring, and routine vulnerability assessments. The occurrence of a data breach of this magnitude serves as a strong indicator of potential negligence and a failure to maintain adequate security controls commensurate with the sensitivity of the health data entrusted to their care. Receiving an official data breach notification letter from Xsolis, Inc. is a formal acknowledgment that your private information was compromised due to their corporate security failure. Under modern jurisprudence, the receipt of such a notice establishes legal standing to participate in a class action lawsuit, recognizing that victims face an imminent, continuous threat of identity theft and financial fraud without needing to prove that financial loss has already occurred. Our firm is actively investigating potential class action claims against Xsolis on a contingency fee basis, meaning there are never any out-of-pocket costs or legal fees unless we successfully recover compensation on your behalf.
Based on the data types reported in this filing, affected individuals face the following specific risks:
Your SSN is the master key to your identity. Once exposed, criminals can open new lines of credit, take out loans, or file taxes in your name.
Combined with a name and other leaked data, date of birth helps criminals pass identity verification questions at banks and government agencies.
Under the Texas Identity Theft Enforcement and Protection Act, you may have a legal claim against Xsolis, Inc. if any of the following apply:
Applicable law: This breach was reported under the Texas Identity Theft Enforcement and Protection Act, which establishes your right to seek damages from Xsolis, Inc..
The hours spent responding to a data breach — canceling accounts, contacting credit bureaus, updating passwords, and investigating fraud — represent compensable economic harm in data breach litigation.
Once your SSN is exposed, protection becomes an ongoing expense. Plaintiffs in data breach settlements have recovered costs for credit freezes, identity protection subscriptions, and time spent dealing with fraudulent accounts — sometimes covering multiple years of exposure.
HIPAA violations carry civil penalties between $100 and $50,000 per violation. Where a healthcare organization's negligence led to the exposure of protected health information, class members may recover statutory damages in addition to actual losses.
Fees charged to close and reopen accounts, issue replacement cards, or dispute fraudulent transactions are recoverable in data breach litigation. So are the costs of overdrafts, late payments, and credit damage caused by unauthorized activity.
Data breach victims regularly report anxiety, loss of sleep, and ongoing fear of identity theft. These non-economic harms are cognizable injuries in data breach litigation, particularly in cases involving SSN or medical record exposure.
Note: an attorney general breach filing does not by itself establish a settlement fund, a payment amount, or a claim deadline. If an official settlement notice is later issued, rely on that notice for payment details and deadlines.
No. Under Texas Identity Theft Enforcement and Protection Act and federal law, the unauthorized exposure of your personal data — regardless of whether it has been actively misused — can be sufficient grounds for a claim. The breach itself is the injury.
Nothing. The Law Office of David S. Harris handles data breach cases on contingency — you pay zero upfront and owe nothing unless compensation is recovered.
Immediately place a free credit freeze at all three bureaus (Equifax, Experian, TransUnion). A freeze blocks new accounts from being opened in your name. Then file a complaint with the FTC at IdentityTheft.gov and contact our office — SSN exposure is one of the most serious breach types.
If Xsolis, Inc. is a covered healthcare entity or business associate under HIPAA, affected patients have additional rights — including the right to an HHS complaint. These HIPAA violations also strengthen civil damages claims. Consult an attorney to understand your full remedies.
Banks may reverse fraudulent charges, but they are not obligated to compensate you for time lost, stress, or indirect damages. A class action claim against the breached company can recover those additional categories of harm.
State statutes of limitations for data breach claims typically run 2–4 years from the date of the breach or its discovery. Because this breach was recently disclosed, the window is open — but acting early preserves your options and strengthens the case.
Accepting free credit monitoring from Xsolis, Inc. does not waive your right to pursue legal action unless you signed a specific release waiving claims. In most cases, victims who accepted monitoring can still file.
Received a notification letter from Xsolis, Inc.?
Read our dedicated guide — what the letter means and exactly what to do.
If you were affected by the Xsolis, Inc. data breach, you may be entitled to compensation. Submit your information below for a free attorney review — no obligation, no upfront cost.
Source: State Attorney General filing, TX
View Official AG Filing →Xsolis, Inc. breach?
Free case review · No fee unless you win