DataBreachLawCenter.com
MonitoringTexas AG filing · September 21, 2026

Call-on-Doc Notifies Patients of 2025 Data Breach

Call-on-Doc has issued data breach notification letters following a security incident discovered in 2026 that exposed extensive personal health information from late 2025. This notification informs individuals about the compromise of their sensitive data, which could lead to various forms of fraud and identity theft, and outlines the immediate steps they should consider taking to protect themselves.

Received a Call-on-Doc notification letter? Find out in minutes if you qualify for compensation.

Free case review
State
Texas
Breach date
December 22, 2025
Reported
September 21, 2026

What may have been exposed

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Health Insurance ID Number
  • Diagnosis and Treatment Information
  • Prescription Information
  • Provider and Treatment Dates
  • Billing and Financial Information

Call-on-Doc, a prominent telehealth and online medical consultation platform, recently began notifying individuals that their sensitive personal and medical data was exposed during a security incident. The breach, which occurred on or about December 22, 2025, was reported to the Texas Attorney General on September 21, 2026. While the exact nature of the breach is unspecified, it involved unauthorized access to systems containing patient records.

The compromised data includes a comprehensive range of sensitive information: Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, and Billing and Financial Information. This combination of identifying and health-related data puts affected individuals at heightened risk for medical identity theft and financial fraud.

Upon receiving a data breach notification letter from Call-on-Doc, it's crucial to understand its legal significance. This letter serves as formal confirmation that your protected information was involved in a security failure. It is important to carefully review the letter for specific details about your exposed data and any recommended actions from Call-on-Doc, such as credit monitoring services.

Given the nature of the exposed data, proactive steps are necessary. Consider placing a fraud alert or security freeze on your credit reports with Equifax, Experian, and TransUnion. Regularly review your Explanation of Benefits (EOB) statements from your health insurer for any unauthorized medical procedures or claims. Additionally, closely monitor your financial statements and credit reports for suspicious activity. If you identify any discrepancies, report them immediately to the relevant financial institution or law enforcement.

Companies like Call-on-Doc, which handle vast amounts of sensitive patient data, are legally obligated under federal and state laws, including HIPAA and the Texas Medical Records Privacy Act, to implement robust security measures. The occurrence of a data breach suggests a potential failure to adequately safeguard this information. Your notification letter may establish your eligibility to seek accountability and potential compensation for the risks and harms you face due to this incident.

Understanding the specifics of your legal rights after a data breach can be complex. If you received a notification letter from Call-on-Doc and wish to understand what it means for your legal standing and options, we offer a free, no-obligation case review. We can help clarify your situation and discuss any potential legal avenues available to you.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Watch your financial accounts

    Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.

  • Check for medical identity theft

    Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Texas Attorney General filing

Related data breach cases