Stockton Cardiology: patient files may have been accessed and removed (disclosed 2026)

Stockton Cardiology: patient files may have been accessed and removed

On December 15, 2025, suspicious emails sent to several employees were identified; on January 17, 2026, the group found that business and patient-care files may have been accessed and removed, potentially including names, mailing and email addresses and billing records with limited medical information.

Last updated: 2026-11-09

Overview

No total is given. The first-disclosure date is the earliest public document confirmed (California AG posting); no 2025 public disclosure was found in other state AG lists, HHS or company notices checked. A filing aggregator lists an earlier state filing on March 18, 2026, but the primary document was not confirmed.

Timeline

2025-12-15Occurred
2026-01-17Discovered
2026-03-20Disclosed

Organization response

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

What you can do

Verify notices through official channels, avoid links in unexpected messages, do not provide credentials, and review credit reports and statements.

Sources

California AG data breach report: Stockton Cardiology Medical GroupCalifornia Department of Justice, Office of the Attorney General · 2026-11-09
Stockton Cardiology: Notice of HIPAA Breach IncidentStockton Cardiology · 2026-11-09
Sample consumer notice filed with California AG (Stockton Cardiology Medical Group)California Department of Justice, Office of the Attorney General · 2026-11-09

Write a comment