Incident Score: Analysis & Impact (XSOMCB1788870784)

In this Rankiteo incident briefing, we review the Xsolis breach identified under incident ID XSOMCB1788870784.

The analysis begins with a detailed overview of Xsolis's information like the linkedin page: https://www.linkedin.com/company/xsolis, the number of followers: 7739, the industry type: Hospitals and Health Care and the number of employees: 243 employees

After the initial compromise, the video explains how Rankiteo's incident engine converts technical details into a normalized incident score. The incident score before the incident was 762 and after the incident was 543 with a difference of -219 which is could be a good indicator of the severity and impact of the incident.

In the next step of the video, we will analyze in more details the incident and the impact it had on Xsolis and their customers.

Xsolis recently reported "Healthcare Data Breaches Surge as Third-Party Vendors Become Prime Targets", a noteworthy cybersecurity incident.

In the first half of 2026, third-party vendors known as business associates were involved in 43% of all large healthcare data breaches reported to U.S.

The disruption is felt across the environment, and exposing Protected Health Information (PHI), Social Security numbers, medical histories, insurance details, with nearly ['1.4 million (Xsolis)', '1.25 million (MCBS)', '10,023 (Spencer Gifts LLC)'] records at risk, plus an estimated financial loss of $450,000 (HIPAA fine for Spencer Gifts LLC).

Formal response steps have not been shared publicly yet.

The case underscores how teams are taking away lessons such as Vendor-side incidents now dominate healthcare data exposure, and covered entities remain liable for vendor breaches under HIPAA. Continuous vendor security assessments are critical, not just one-time compliance checks, and recommending next steps like Employers with group health plans must ensure HIPAA compliance, conduct risk analyses, and implement security policies. Enhanced monitoring and network segmentation are recommended for third-party vendors.

Finally, we try to match the incident with the MITRE ATT&CK framework to see if there is any correlation between the incident and the MITRE ATT&CK framework.

The MITRE ATT&CK framework is a knowledge base of techniques and sub-techniques that are used to describe the tactics and procedures of cyber adversaries. It is a powerful tool for understanding the threat landscape and for developing effective defense strategies.