Class Action Filed After Hendrick Health Data Breach Exposes Patient Information

Potts Law Firm has initiated a class action lawsuit against Hendrick Health and Xsolis, Inc. following a data breach that occurred on January 22, 2026. The breach, resulting from a phishing attack on Xsolis, allegedly exposed sensitive patient information, including Social Security numbers and medical records. Affected patients were not notified until June 2026, over 130 days after the breach was discovered. The lawsuit claims that both organizations failed to implement adequate cybersecurity measures and timely notifications, putting patients at risk of identity theft and fraud. The class action seeks damages and injunctive relief for all individuals whose information was compromised. Patients who received breach notification letters are advised to monitor their accounts closely. The case is set to be heard in the Taylor County District Court.

Key Points: • A phishing attack on Xsolis led to a data breach exposing sensitive patient information. • Affected patients were notified of the breach over 130 days after it was discovered. • The class action lawsuit seeks damages for all individuals impacted by the breach.