DataBreachLawCenter.com
MonitoringCalifornia AG filing · September 17, 2026

CallonDoc Data Breach 2025: Your Notification Letter Explained

CallonDoc, Inc., a California-based telehealth platform, reported a data breach on September 17, 2026, where unauthorized parties accessed patient systems around December 22, 2025. If you received a notification letter, your Full Name, Date of Birth, Social Security Number, and sensitive health information may be compromised. Understanding this letter is essential for protecting your legal rights and personal security.

Received a CallonDoc, Inc. notification letter? Find out in minutes if you qualify for compensation.

Free case review
State
California
Breach date
December 22, 2025
Reported
September 17, 2026

What may have been exposed

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Health Insurance ID Number
  • Diagnosis and Treatment Information
  • Prescription Information
  • Financial Account and Payment Details

CallonDoc, Inc., a California-based company operating a digital healthcare platform, formally reported a data security incident on September 17, 2026. This disclosure indicated that unauthorized third parties gained access to its systems on or around December 22, 2025, potentially compromising sensitive patient data.

According to the report, the exposed information includes highly private details such as your Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Financial Account and Payment Details. The presence of this combination of personal identifiers and health data presents significant risks to affected individuals.

The exposure of such comprehensive information can lead to severe consequences. Victims face an increased risk of medical identity theft, where fraudulent claims could be filed under your name, and your health records potentially altered. This breach also significantly elevates the risk of financial identity theft and tax fraud, given the inclusion of your Social Security Number and financial account details.

As a healthcare entity handling protected health information, CallonDoc, Inc. is subject to strict federal and state regulations, including HIPAA and California’s Confidentiality of Medical Information Act (CMIA). These laws mandate robust security measures to protect patient data. The occurrence of this data breach suggests that the company may not have fully upheld its legal obligations to safeguard your information, potentially exposing you to preventable harm.

If you have received a data breach notification letter from CallonDoc, Inc., it serves as an official acknowledgment that your information was compromised. It is critical to carefully review this letter and consider the immediate steps to protect yourself, such as monitoring your credit reports and financial statements for any unusual activity. This notification is also a key document in understanding your legal standing.

Our firm is actively investigating the CallonDoc data breach to determine the full extent of the harm to affected individuals. If your personal and health information was exposed in this incident, you may have legal avenues to explore for recourse. We offer a free and confidential case review to help you understand your legal rights and the potential steps you can take next.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Watch your financial accounts

    Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.

  • Check for medical identity theft

    Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: California Attorney General filing

Related data breach cases