Free consultation · No obligation786-306-7278
DataBreachClassActions.com
MonitoringOregon AG filing · September 24, 2026

Call-On-Doc, Inc. Data Breach Exposes Patient Medical Data

Call-On-Doc, Inc. reported a data breach in 2026 that compromised highly sensitive patient data, including full names, Social Security Numbers, and detailed medical records. This exposure creates significant risks of medical identity theft and financial fraud for affected individuals. If you received a notification letter, you may have legal options to pursue compensation.

This breach is real, not a scam. Call-On-Doc, Inc. officially reported it to the Oregon Attorney General on September 24, 2026.

Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278

Received a Call-On-Doc, Inc. notification letter? Find out in minutes if you qualify for compensation.

Free case review
State
Oregon
Breach date
December 28, 2025
Reported
September 24, 2026

What may have been exposed

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Health Insurance ID Number
  • Diagnosis and Treatment Information
  • Prescription Information
  • Provider and Treatment Dates

Call-On-Doc, Inc., a telehealth and online medical consultation platform, reported a data security incident to the Oregon Attorney General in September 2026. This breach involved the compromise of substantial amounts of sensitive personal and medical data, underscoring the risks associated with digital healthcare services that store vast quantities of patient information.

The compromised information from Call-On-Doc, Inc. includes Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. The exposure of such a comprehensive set of personal health data puts affected individuals at severe, long-term risk. This can lead to medical identity theft, where fraudulent claims are filed under your name, and even financial fraud through the misuse of Social Security Numbers.

As a custodian of protected health information, Call-On-Doc, Inc. is bound by strict federal and state regulations, including HIPAA and Oregon consumer protection laws. These mandates require robust security measures to protect patient data from unauthorized access. The occurrence of this breach suggests potential failures in upholding these critical legal obligations, which are designed to safeguard patient privacy and data integrity.

Receiving an official data breach notification letter from Call-On-Doc, Inc. confirms that your confidential records were accessed by unauthorized parties. Individuals whose data has been exposed in such incidents may have legal grounds to seek compensation for the compromise of their privacy, any out-of-pocket expenses incurred, and the ongoing stress of managing potential identity theft. You do not need to have already suffered financial loss to explore your legal options.

Our firm is actively monitoring the Call-On-Doc, Inc. data breach and investigating potential claims on behalf of those affected. If you received a data breach notification from Call-On-Doc, Inc., we encourage you to discuss your situation with an attorney. We offer free case reviews and handle these cases on a contingency fee basis, meaning you only pay if we successfully recover compensation for you.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Check for medical identity theft

    Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Oregon Attorney General filing

Related data breach cases

Call-On-Doc, Inc. Data Breach 2026: What To Do Next