skip to main content
Top of main content

Information Security Incident Update: Our Commitment to Transparency

REMINDER: Carle Health will not update patient identifiers over the phone.

Patients who need to recover forgotten usernames or update contact details can use the self-help features of MyCarle to access their username and password in addition to visiting a Carle Health facility in person with a photo ID.

Thank you for helping us create a secure care environment for the community.

XSolis, Inc. Data Security Incident

  • Who is XSolis, Inc.?

    XSolis, Inc. is a vendor utilized by Carle Health to provide select case and utilization management services.

  • What happened?
    On April 23, 2026, XSolis, Inc. notified Carle Health that it experienced unauthorized network activity on January 22, 2026, due to a targeted phishing attack. Upon discovery, XSolis immediately contained and ended the unauthorized access and began an investigation, including engaging cybersecurity experts and notifying law enforcement. At this time, there is no evidence that the affected data has been misused or that any additional unauthorized activity has occurred in their network.
  • Who was impacted?
    Some Carle Health patients were impacted by this security incident. XSolis, Inc. sent notifications letters to impacted patients individually, including notice to next of kin or power of attorney, when appropriate. If you or your loved one’s information was impacted, you will or have received a letter explaining the incident, steps taken to reduce harm, and any other action necessary for patients to protect themselves and their information.
  • What data was impacted?
    For affected patients, the information that may have been accessed included patient name, date of birth, doctor name, health insurance information, diagnosis, medical record number, dates and locations of treatment, and in some circumstance, social security number.
  • Were Carle’s patient records or network security impacted by this incident?
    No. There was no impact to Carle’s medical records or our electronic environment.
  • How can I learn more about this incident?
    If you have any questions or concerns, please contact XSolis’ Call Center at 1-844-406-4585 Monday through Friday from 8:00 am to 5:00 pm Central Time, excluding major U.S. Holidays.