NEWS RELEASES

About > News & Media > For the Media > News Releases > Notice of Xsolis Phishing Attack

Notice of Xsolis Phishing Attack

Legacy Health was informed by its vendor, XSolis, Inc., that unauthorized activity occurred within a limited portion of its IT systems. XSolis, which provides case management services for patient care, identified and immediately contained the activity on January 22, 2026, following a targeted phishing attack.

XSolis identified that the protected health information (PHI) of certain Legacy Health patients may have been accessed as a result of this incident. The information involved may include date of birth, medical record number, health insurance information, and clinical information such as diagnosis, treatment dates, and provider name. The information did not include Social Security numbers or financial information such as credit card numbers.

XSolis reported that there has been no evidence of unauthorized access after January 22, 2026, and no indication that any personal information has been misused. In response to this incident, XSolis engaged external cybersecurity experts, notified law enforcement, and implemented additional security measures.

Legacy Health is providing direct notice to individuals for whom we have sufficient contact information. For some individuals, however, sufficient contact information is not available. As a result, this notice is being provided in accordance with applicable law.

Protecting the confidentiality of the information entrusted to us is something we take very seriously.

If you have questions, please call the XSolis incident support line at 844‑403‑4585, Monday through Friday, 8 a.m. to 5:30 p.m. Central Time.



About Legacy Health

Legacy Health is a large, nonprofit, integrated health system with seven hospital campuses serving Oregon and Southwest Washington, including a full-service children’s hospital and a behavioral health emergency services facility. Legacy also operates an extensive ambulatory services network that includes 70 clinic locations and offers a broad continuum of care. The organization is a $3 billion + community system of care with over 14,000 employees in two states. Known for its commitment to high-quality, patient-centered care, Legacy Health has earned a strong reputation for clinical excellence, community partnership, and mission-driven service in the Pacific Northwest. For more information, visit www.legacyhealth.org.

MEDIA CONTACT:

Email: media@lhs.org
Pager: 503-938-7788