On January 17, 2026, Stockton Cardiology Medical Group (“Stockton Cardiology”) learned that certain patient-related information stored within its systems may have been accessed by an unauthorized individual. The organization previously identified suspicious emails sent to several employees on December 15, 2025, and while those emails were promptly deleted, subsequent investigation revealed that files maintained in the normal course of business were accessed and removed.
On February 17, 2026, Stockton Cardiology discovered that some of the compromised data was publicly disclosed. The organization immediately launched an internal investigation with the assistance of an independent security firm and began working to restore system integrity.
Stockton Cardiology Medical Group is a longstanding medical provider in Stockton, California, offering comprehensive cardiovascular care and diagnostic services to patients across the region. The practice maintains medical, administrative, and operational records essential to patient treatment and continuity of care.
In response to the incident, Stockton Cardiology implemented security improvements, shut down an outdated remote access service, added multi-factor authentication (MFA) to internal systems, reset all system passwords, and began reviewing data retention policies to reduce unnecessary file storage. Affected individuals are being offered complimentary one-year credit monitoring services through Epiq.
If you received a Data Breach Notification Letter from Stockton Cardiology Medical Group, it confirms that your information may have been exposed.
What information is involved in the Stockton Cardiology Medical Group Data Breach?
Compromised information may include:
Name
Mailing Address
Email Address
Billing Records containing limited medical information
Other files containing personally identifiable information (PII) or protected health information (PHI)
This type of information may enable threat actors to commit identity theft, impersonation, or medical fraud. Because the breach involved potentially sensitive medical billing data, affected individuals may be at heightened risk for fraudulent insurance claims or unauthorized use of health information.
Stockton Cardiology has advised individuals to enroll in the complimentary identity protection services offered through Epiq and to monitor their financial and medical accounts for suspicious activity.
Residents of California receive additional protections under the California Consumer Privacy Act (CCPA) and the Confidentiality of Medical Information Act (CMIA), which grant expanded rights pertaining to personal and medical information privacy.
If you received a NOTICE OF DATA BREACH letter from Stockton Cardiology Medical Group, your personal information may be at risk and could be misused for identity theft or fraud.
Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.