Call-On-Doc Data Breach: What Your Notification Letter Means
Call-On-Doc, Inc., a telehealth provider, reported a data breach impacting sensitive patient information in 2026. This incident exposed Full Name, Date of Birth, Social Security Number, and extensive medical records, creating long-term risks for those affected. Understanding your notification letter is crucial to protect your rights and data.
Received a Call-On-Doc, Inc. notification letter? Find out in minutes if you qualify for compensation.
Free case review- State
- Oregon
- Breach date
- December 28, 2025
- Reported
- September 24, 2026
What may have been exposed
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
Call-On-Doc, Inc., a telehealth and online medical consultation platform, reported a data security incident to the Oregon Attorney General on September 24, 2026. This breach, discovered on December 28, 2025, involved highly sensitive patient information. As a provider of virtual healthcare, Call-On-Doc handles extensive personal and medical data, making any security failure particularly concerning for patients.
The information reported as compromised includes your Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. This combination of identifying and deeply personal health data poses significant risks. Exposed medical records can lead to fraudulent insurance claims or altered medical histories, while a compromised Social Security Number opens the door to identity theft and financial fraud.
Companies like Call-On-Doc are entrusted with protecting sensitive health information and are bound by laws such as HIPAA. A breach of this nature suggests potential failures in safeguarding patient data, which could include inadequate security measures or slow response to vulnerabilities. When you receive a notification letter, it is an admission that your confidential records were accessed without authorization.
If you received a notification letter from Call-On-Doc, it's important to understand your legal standing. While the letter may offer credit monitoring, this does not always fully address the long-term risks or potential damages from exposed medical and personal data. You have the right to seek information about how your data was compromised and what steps the company is taking to prevent future incidents.
Our firm is currently reviewing the Call-On-Doc data breach and its impact on affected individuals. If your information was exposed, understanding the full scope of your rights is important. We offer a confidential, free case review to help you understand what this breach means for you and if you may have a claim for compensation. There is no cost to you unless we successfully recover on your behalf.
Received the Call-On-Doc, Inc. notification letter? The Call-On-Doc, Inc. case file tracks this filing.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Oregon Attorney General filing
Related data breach cases
- Sheppard, Mullin, Richter & Hampton LLP
- Midvale Indemnity Company
- Poppins Payroll Company
- Lamb Weston Holdings, Inc.
- City of McMinnville
- Upbound Group, Inc.
- OneMain Financial
- MedImpact Healthcare Systems, Inc.
- Ridgeway Pharmacy Ltd
- IDScan.net
- Kaniksu Community Health
- Craneware, Inc.
- See's Candies - Corporate Office
- zHealth, Inc.