Case file
Case File: Call-on-Doc Data Breach
This file collects the dated facts on record for the Call-on-Doc incident. The state report is dated September 21, 2026. The incident itself is dated December 22, 2025.
Timeline
273 days separate the incident date from the date it was reported.
- December 22, 2025Incident dateWhen the filing says the breach took place.
- September 21, 2026Report filed in TexasDate the notice was lodged with the Texas Attorney General.
Case facts
- Filing state
- Texas
- Date reported
- September 21, 2026
- Incident date
- December 22, 2025
- Receiving office
- Texas Attorney General
Data categories in the file
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
- Billing and Financial Information
Case notes
Call-on-Doc, a prominent telehealth and online medical consultation platform, reported a data security incident to Texas authorities on September 21, 2026. The company identified the breach on December 22, 2025, and has indicated that an investigation into the nature and scope of the compromise is currently ongoing.
The breach exposed a broad range of sensitive personal and health information. Affected data types include individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, and Billing and Financial Information. This comprehensive collection of data is central to the services Call-on-Doc provides.
The exposure of these specific data categories presents substantial risks to affected individuals. The combination of Full Name, Date of Birth, and Social Security Number significantly increases the risk of financial identity theft. Furthermore, the compromise of Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, and Prescription Information could lead to medical identity fraud or targeted phishing attempts.
To safeguard against potential misuse of exposed data, individuals should remain vigilant. Regularly review explanation of benefits (EOB) statements from your health insurer for any services or prescriptions you did not receive. Carefully monitor bank and credit card statements for unauthorized charges. Consider placing a fraud alert or security freeze on your credit reports with the three major credit bureaus to help prevent new accounts from being opened in your name.
This information is publicly available through data breach filings submitted by Call-on-Doc to regulatory bodies, consistent with requirements for reporting such incidents.
Questions about this case file
- Where does the Call-on-Doc case file come from?
- Every entry is taken from the breach report Call-on-Doc lodged with the Texas Attorney General. Nothing here is estimated.
- Why do the incident date and the report date differ?
- Companies usually investigate before they report. The gap between the two dates shows how long that took.
- What does the records-affected figure count?
- It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
- Does this case file change over time?
- Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.
More Texas case files
- USA DeBusk LLC
- Employer Solutions Staffing Group
- Access Dental Management LLC
- John Tyler Alcohol Safety Action Program
- Levin, Sedran & Berman, LLP
- Vanguard Group Inc.
- Colorado County, Texas
- Dallas County MHMR (Metrocare)
- PCH Digital, LLC
- Uber Technologies, Inc.
Filing source: Texas Attorney General