Call-On-Doc, Inc. Data Breach Exposes Patient Medical Data
Call-On-Doc, Inc. reported a data breach in 2026 that compromised highly sensitive patient data, including full names, Social Security Numbers, and detailed medical records. This exposure creates significant risks of medical identity theft and financial fraud for affected individuals. If you received a notification letter, you may have legal options to pursue compensation.
This breach is real, not a scam. Call-On-Doc, Inc. officially reported it to the Oregon Attorney General on September 24, 2026.
Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278
Received a Call-On-Doc, Inc. notification letter? Find out in minutes if you qualify for compensation.
Free case review- State
- Oregon
- Breach date
- December 28, 2025
- Reported
- September 24, 2026
What may have been exposed
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
Call-On-Doc, Inc., a telehealth and online medical consultation platform, reported a data security incident to the Oregon Attorney General in September 2026. This breach involved the compromise of substantial amounts of sensitive personal and medical data, underscoring the risks associated with digital healthcare services that store vast quantities of patient information.
The compromised information from Call-On-Doc, Inc. includes Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. The exposure of such a comprehensive set of personal health data puts affected individuals at severe, long-term risk. This can lead to medical identity theft, where fraudulent claims are filed under your name, and even financial fraud through the misuse of Social Security Numbers.
As a custodian of protected health information, Call-On-Doc, Inc. is bound by strict federal and state regulations, including HIPAA and Oregon consumer protection laws. These mandates require robust security measures to protect patient data from unauthorized access. The occurrence of this breach suggests potential failures in upholding these critical legal obligations, which are designed to safeguard patient privacy and data integrity.
Receiving an official data breach notification letter from Call-On-Doc, Inc. confirms that your confidential records were accessed by unauthorized parties. Individuals whose data has been exposed in such incidents may have legal grounds to seek compensation for the compromise of their privacy, any out-of-pocket expenses incurred, and the ongoing stress of managing potential identity theft. You do not need to have already suffered financial loss to explore your legal options.
Our firm is actively monitoring the Call-On-Doc, Inc. data breach and investigating potential claims on behalf of those affected. If you received a data breach notification from Call-On-Doc, Inc., we encourage you to discuss your situation with an attorney. We offer free case reviews and handle these cases on a contingency fee basis, meaning you only pay if we successfully recover compensation for you.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Oregon Attorney General filing
Related data breach cases
- Roseburg Therapy dba Stronger Oregon
- AllCare Health, Inc.
- Hood River Dental
- PeaceHealth Sacred Heart Medical Center
- iRhythm Technologies Inc.
- Sheppard, Mullin, Richter & Hampton LLP
- Midvale Indemnity Company
- Poppins Payroll Company
- City of McMinnville
- Lamb Weston Holdings, Inc.
- Upbound Group, Inc.
- OneMain Financial
- MedImpact Healthcare Systems, Inc.
- Ridgeway Pharmacy Ltd