Breaches and incidentsBriefReported by a reputable outlet, citing the company
Xsolis and MCBS: health IT business associates report 1.4 million and 1.26 million
Xsolis (utilization management software) reported 1,396,519 individuals: a phishing email in Jan 2026 gave the actor four days of access.
- Disclosed
What happened
- Xsolis (utilization management software) reported 1,396,519 individuals: a phishing email in Jan 2026 gave the actor four days of access; files held names, dates of birth, SSNs, insurance and treatment information. Medical Computer Business Services (MCBS) reported 1,261,464 after a group calling itself PEAR had network access for four days in Sep 2025, exfiltrated files and demanded a ransom.
- Root cause: phishing (Xsolis); not disclosed (MCBS).
- Attacker: PEAR (MCBS, data theft and extortion); not named (Xsolis).
- Response: notifications to clients and individuals.
Sources
- https://www.hipaajournal.com/june-2026-healthcare-data-breach-report/
- https://www.hipaajournal.com/xsolis-data-breach/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.