Call-on-Doc data breach
Telehealth provider Call-on-Doc confirmed a data breach impacting patient information, which was reported to the Texas Attorney General on September 21, 2026. This incident, originating on December 22, 2025, exposed sensitive health and personal data, potentially creating long-term risks for affected individuals. Those who received a notification letter may have legal grounds to seek a case review.
Docket sheet
- Company
- Call-on-Doc
- Venue
- Texas Attorney General
- Filed
- September 21, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredDecember 22, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Texas Attorney GeneralSeptember 21, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
- Billing and Financial Information
Clerk's notes
Call-on-Doc, a telehealth platform, officially reported a data breach to the Texas Attorney General on September 21, 2026. This security incident, which first occurred on December 22, 2025, involved unauthorized access to sensitive patient data. The breach is currently under monitoring, indicating an ongoing assessment of the situation.
The exposed information from this incident includes a comprehensive range of sensitive details. Specifically, the compromised data types consist of Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, and Billing and Financial Information.
The exposure of such extensive personal and health data carries significant risks for affected individuals. This combination of identifiers can lead to various forms of medical identity theft, where bad actors might obtain unauthorized medical care or submit fraudulent claims. Furthermore, the compromise of foundational information like Social Security Numbers and Full Names heightens the risk of financial identity theft and targeted scams.
As a provider handling confidential patient records, Call-on-Doc is subject to strict federal and state regulations, including HIPAA and the Texas Medical Records Privacy Act. These laws mandate robust security measures to protect sensitive data. A breach of this nature suggests potential vulnerabilities in the company's data protection protocols, which could lead to legal accountability for failing to safeguard patient privacy.
If you received a data breach notification letter from Call-on-Doc, it confirms that your personal and health information was involved in this incident. Receiving such a notification may establish the basis for an affected individual to explore their legal options. We invite you to request a free case review to understand potential next steps without any obligation.
If a notification letter about this breach reached you, see every Texas data breach on file or browse all cases.
Other Texas docket entries
- Insight Credit UnionTexas AGNovember 6, 2026Monitoring
- Fisher59, LLCTexas AGNovember 6, 2026Monitoring
- Amplifon (USA), Inc.Texas AGNovember 6, 2026Monitoring
- Park Dental Partners, Inc.Texas AGNovember 6, 2026Monitoring
- UFP Technologies Inc.Texas AGNovember 6, 2026Monitoring
- HTH Companies, Inc.Texas AGNovember 6, 2026Monitoring
- RevSpring, Inc.Texas AGNovember 6, 2026Monitoring
- Gator Town Pediatrics, Family and Urgent Care PLLCTexas AGNovember 6, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.