CallonDoc, Inc., a telehealth provider, experienced a data security incident impacting current and former patients. The company disclosed the breach in September 2026, with consumer notifications beginning on September 18, 2026. The incident potentially exposed protected health information between December 22, 2025, and January 3, 2026.
The exposed data types include name, email address, physical address, phone number, medical diagnosis, medication information, and visit type. Medical diagnosis, medication information, and visit type constitute protected health information. The official notice did not state the total number of affected individuals or specify the affected states. No exposure of Social Security Numbers or financial data was mentioned.
Additional details about the breach, including the total number of individuals impacted, may emerge as the investigation continues. Consumer notification may also continue to be processed and issued during this period.