Call-on-Doc Data Breach Exposes Sensitive Patient Medical Records

Call-on-Doc, a prominent telehealth and online medical consultation platform, recently disclosed a data security incident that occurred on December 22, 2025. The company reported this breach to the Texas Attorney General on September 21, 2026, indicating that patient data may have been exposed through an unspecified security lapse.

The compromised information includes highly sensitive patient details such as Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, and Billing and Financial Information. The exposure of such comprehensive data can lead to serious risks, including medical identity theft, fraudulent insurance claims, and various forms of financial fraud.

As a healthcare provider handling protected health information, Call-on-Doc is obligated under federal laws like HIPAA and the Texas Medical Records Privacy Act to implement robust security measures. The occurrence of this breach suggests a potential failure in maintaining these critical safeguards, which could render the company liable for negligence and failing to protect patient privacy.

If you have received a data breach notification letter from Call-on-Doc, it signifies that your confidential information was directly affected by this security incident. This notice often provides the basis for individuals to consider legal action to seek accountability and potential compensation for the risks, inconvenience, and anxiety caused by the exposure of their personal data.

Understanding your legal rights after a data breach can be complex, but affected individuals typically do not need to demonstrate immediate financial loss to explore their options. We offer a free, no-obligation case review to help you understand what happened and if you may be eligible to join a class action lawsuit.