UnknownTechnologyInformationCustomer Data InvolvedIdentity (basic)Low

Xsolis

bd_4bbc62dcd7bd237d · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 28, 2026

To disclose

—

Affected

220state residents only

Linked

12 filings

Confidence

68%

Full breach record for Xsolis →

Xsolis, Inc. filed a supplemental notice with the New Hampshire Attorney General on July 28, 2026, updating a prior June 19, 2026, breach notification. The company reported that approximately 220 New Hampshire residents were affected. Final notification letters were mailed on June 30, 2026. The specific nature of the unauthorized access was not detailed in this submission.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jul 28, 2026

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 12 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Texas State AGbd_26eaa63b7bb2a5b02026-07-23 · +5dVerified
California State AGbd_7311690bbe2b92bd2026-07-21 · +7dVerified
Massachusetts State AGbd_a6f1904047ec98392026-06-30 · +28dCandidate
New Hampshire State AGbd_451c378a2883b5402026-06-25 · +33dVerified

Show 6 more filings ↓up to 53d gap

Texas State AGbd_d235bbb96662e2042026-06-22 · +36dVerified
California State AGbd_346a5a948fd4d9e02026-06-19 · +39dVerified
Washington State AGbd_fe116170ecddcbeb2026-06-19 · +39dVerified
HHS OCRbd_129f6c41c09a93132026-06-05 · +53dVerified
Nebraska State AGbd_74c2b18367b0c4ec2026-06-05 · +53dCandidate
Nebraska State AGbd_87e15a1e0d17f6d22026-06-05 · +53dVerified

Showing first 10 of 11 linked disclosures.

Name: Xsolis
norm: xsolis
Domain: xsolis.com

Name: Xsolis
norm: xsolis
Domain: xsolis.com
Industry: Technologyllm

Discovered: —
Materiality determined: —
Notification sent: Jun 30, 2026
Affected individuals: 220state-resident count only
Data types: Identity (basic)
Attack vector: Unknown
Regulator citations: Submitted supplemental information to the Office of the Attorney General, Consumer Protection and Antitrust Bureau

During the incident: Continued working with appropriate healthcare providers to confirm and locate contact information and state of residency for potentially impacted individuals
Mailed a second and final wave of notifications on June 30, 2026
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 7 states

View merged incident ↗

HHS OCRJun 5 · first

Nebraska State AGJun 5 · first

California State AG+14d

Washington State AG+14d

Texas State AG+17d

New Hampshire State AG+20d

Massachusetts State AG+25d

California State AG+46d

Texas State AG+48d

New Hampshire State AG+53d · this page

Pattern: first filing Jun 5 (TN), last Jul 28 (NH) — a 53-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/xsolis-20260728.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 28, 2026
Raw hash: 1acd13e1390f71ff5ac4d43e2c11840e59b828afc2f17e9b2e2e5d45443a641a

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityXsolis

Victim entityXsolis

IncidentUnknown

Stated responseContinued working with appropriate healthcare providers to confirm and locate contact information and state of residency for potentially impacted individuals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov