Story perspectives

Xsolis Phishing Breach Exposes 1.4 Million Health Records

6/25/2026

Summary

Story summary

Xsolis, Inc. said a phishing attack on Jan 20 2026 exposed data of 1,396,519 people.
Breach was detected on Jan 22 2026 and reported to HHS on June 5 2026.
Stolen files include names, addresses, Social Security numbers and data from Mayo Clinic and Rochester Regional Health patients on the Dragonfly platform.
HHS listed the breach on June 22 2026 and may investigate.
Xsolis is mailing notices, offering 12 months of monitoring, and reports no ransomware claim or misuse.

1 of 1

Story summary

Xsolis, Inc. said a phishing attack on Jan 20 2026 exposed data of 1,396,519 people.
Breach was detected on Jan 22 2026 and reported to HHS on June 5 2026.
Stolen files include names, addresses, Social Security numbers and data from Mayo Clinic and Rochester Regional Health patients on the Dragonfly platform.
HHS listed the breach on June 22 2026 and may investigate.
Xsolis is mailing notices, offering 12 months of monitoring, and reports no ransomware claim or misuse.