NOTICE OF DATA SECURITY INCIDENT Xsolis, Inc. (“Xsolis”), a vendor that provides case and utilization management services to healthcare organizations, is providing notice of a data security incident that may have involved certain personal and protected health information. On January 22, 2026, Xsolis became aware of unauthorized activity impacting a limited portion of the Xsolis environment resulting from a targeted phishing attack on January 20, 2026. Xsolis immediately contained the activity and launched an investigation with the assistance of external cybersecurity experts. The investigation determined that an unauthorized actor acquired certain files containing information that may include names, addresses, health insurance information, Social Security numbers, and medical treatment information. Xsolis is not aware of any actual or attempted misuse of information because of this incident. Xsolis notified law enforcement, reset credentials, deployed additional security measures, and is offering complimentary identity monitoring services through Kroll to eligible individuals, including credit monitoring, fraud consultation, and identity theft restoration. What You Can Do: Eligible individuals who receive a notification letter may enroll in the complimentary identity monitoring services by visiting Enroll.krollmonitoring.com/redeem and following the instructions outlined in their letter. Individuals are also encouraged to review account statements, explanation of benefits statements, and credit reports for any unauthorized activity. For More Information: For additional information, please call (844) 403-4585, Monday through Friday, between 8:00 a.m. and 5:30 p.m. Central Time, excluding major U.S. holidays, or visit www.xsolisdataincident.com.