CallonDoc, Inc. data breach
In September 2026, CallonDoc, Inc. reported a security incident originating in December 2025 that compromised sensitive patient data. The breach affects individuals whose Full Name, Social Security Number, and medical details were exposed, increasing risks of identity theft and medical fraud. Affected persons who received a notification letter should review their legal options to understand the potential impact and next steps.
Docket sheet
- Company
- CallonDoc, Inc.
- Venue
- California Attorney General
- Filed
- September 17, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredDecember 22, 2025
Date of the incident as stated in the filing.
- 2
Reported to the California Attorney GeneralSeptember 17, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Financial Account and Payment Details
Clerk's notes
CallonDoc, Inc., a digital healthcare and telehealth platform operating in California, formally reported a security incident to state authorities in September 2026. This breach, which began in December 2025, involved unauthorized third-party access to the highly sensitive personal and medical data CallonDoc maintains for its patients.
The exposed information includes a comprehensive range of sensitive data categories. Affected individuals may have had their Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Financial Account and Payment Details compromised.
Such a data compromise on a telehealth platform carries significant risks. The combination of personal identifiers like Social Security Numbers with medical and financial details creates a high potential for severe financial identity theft, medical identity theft, and fraudulent insurance claims, which can have long-lasting consequences for victims.
As a healthcare entity, CallonDoc, Inc. is subject to stringent federal and state regulations, including HIPAA and the California Confidentiality of Medical Information Act (CMIA). These laws mandate robust safeguards for patient data. A breach of this magnitude raises concerns regarding the company's adherence to its legal obligations to protect sensitive health information.
If you have received a data breach notification letter from CallonDoc, Inc., this confirms that your private information was involved in this security incident. These notifications are official acknowledgments that your data has been exposed to unauthorized parties.
Individuals impacted by this breach are encouraged to understand their legal standing. The exposure of sensitive personal and medical data, regardless of immediate financial harm, can be an actionable injury due to the heightened risk of future identity theft and privacy violations. Evaluating your case can clarify available options.
If a notification letter about this breach reached you, see every California data breach on file or browse all cases.
Other California docket entries
- ZZ Diag ProbeCalifornia AG—Monitoring
- STS Aviation GroupCalifornia AGOctober 19, 2026Monitoring
- Citizens BankCalifornia AGOctober 19, 2026Monitoring
- John G. Yphantides, a Professional Law CorporationCA AGOctober 16, 2026Monitoring
- Neuro Wellness SpaCalifornia AGOctober 16, 2026Monitoring
- Frazer LLPCalifornia AGOctober 16, 2026Monitoring
- Covered CaliforniaCalifornia AGOctober 16, 2026Monitoring
- Inner City Education FoundationCA AGOctober 16, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.