1.4 million patients, 7 health systems caught in AI company data breach

 A data breach involving healthcare AI company Xsolis has ensnared multiple health systems.

Xsolis, which provides utilization management and care coordination technology for health systems, reported the targeted phishing attack June 5, noting that on Jan. 20 an unauthorized person accessed portions of the company’s IT environment and acquired a “limited number” of files. The company told HHS on June 5 that 1.4 million individuals were affected by the breach, a number the agency posted June 22.

The affected health systems include Rochester, Minn.-based Mayo Clinic, Seattle-based UW Medicine, Portland, Ore.-based Legacy Health, Arlington, Va.-based VHC Health, Rochester (N.Y.) Regional Health, Urbana, Ill.-based Carle Health, and Fishersville, Va.-based Augusta Health.

Xsolis said it is not aware of any misuse of data and is notifying affected patients.

https://www.beckershospitalreview.com/healthcare-information-technology/cybersecurity/1-4-million-patients-7-health-systems-caught-in-ai-company-data-breach/