Xsolis discovered unauthorized activity on its systems on January 22, 2026, two days after the initial phishing intrusion. The company subsequently contained the breach and halted unauthorized access to its network. According to the investigation, the exposed data includes sensitive identifiers such as Social Security numbers, dates of birth, health insurance details, and medical treatment records.

Edelson Lechtzin LLP is currently evaluating potential class action litigation to seek legal remedies for those impacted. The firm advises affected individuals to monitor their credit reports and account statements for suspicious activity while preserving any official breach notifications received from the company. Those seeking a legal consultation regarding their rights can contact the firm at 844-696-7492 or through its website.