CallonDoc, Inc.

CallOnDoc's entire explanation to California regulators for over 1.1 million exposed patient records was one sentence: unauthorized access, discovered December 28, 2025. No attack vector named, no control point identified, just a date and a headcount. What leaked was not card numbers but diagnoses, prescriptions, and contact details, the full shape of a patient's medical life. A database of that size sitting reachable enough for a dark web seller called iProfessor to resell it is not a misfortune; it is a filing cabinet with no lock and no protections open for anyone who could get to it.