Healthcare technology company Xolis disclosed a data breach compromising sensitive information of approximately 1.4 million individuals. Attackers gained network access through a phishing attack.
Xolis confirmed the breach affected patient and user data stored on its systems. The company identified the compromise through a phishing campaign that successfully penetrated its network security.
The breach exposes the ongoing vulnerability of healthcare providers to social engineering attacks. Phishing remains one of the most effective vectors for initial network access, particularly in sectors handling sensitive personal and medical information.
Xolis has not disclosed the specific types of data compromised or provided details on the timeline of discovery. The company typically serves healthcare organizations and their patients, meaning the breach could impact multiple institutions.
Xolis is notifying affected individuals and relevant authorities as required by data protection regulations. The company recommends monitoring accounts and credit reports for suspicious activity.
This breach adds to a growing list of healthcare data incidents in recent years, with phishing attacks consistently cited as the entry point for major breaches across the sector.
The Head Mare hacktivist group has compromised TrueConf video conferencing servers and replaced legitimate client installers with trojaned versions containing backdoors.
OpenAI inadvertently launched a denial-of-service attack against Hugging Face, the popular machine learning platform. The incident has prompted questions about AI infrastructure security and unintended consequences of large-scale operations.
Framework's customer database was compromised in a data breach, though payment information was not exposed. The company has disclosed the incident to affected users.
Security researchers have identified potential hardware backdoors in certain x86 processors. The findings, detailed in a GitHub repository called Rosenbridge, reveal vulnerabilities at the processor level that could allow unauthorized access.