Call-on-Doc Telehealth Reports Texas Data Breach Impacting Patient Records

Call-on-Doc, a telehealth services provider, filed a data breach notification with the Texas Attorney General on September 21, 2026. This filing, available in public records, details a security incident that occurred on or around December 22, 2025. The company's investigation into the specifics of how the breach occurred is currently ongoing.

The compromised information includes a wide range of sensitive personal and health data. Affected individuals may have had their Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, and Billing and Financial Information exposed. This collection of data represents a comprehensive snapshot of an individual's identity and medical history.

Because Call-on-Doc facilitates online medical consultations and prescription services, it routinely collects and stores extensive personal and health records. The digital nature of its operations means it relies heavily on electronic storage for this sensitive data. The exposure of such detailed information presents substantial risks, as it could be exploited for various forms of fraud.

Individuals whose data was compromised face potential threats such as medical identity theft, where their health insurance or medical records could be used to obtain unauthorized care or services. The combination of personal identifiers and health information also increases the risk of financial identity theft and targeted phishing attacks. These sophisticated scams often leverage specific personal details to appear more credible to victims.

Those who receive a data breach notification from Call-on-Doc should take immediate and proactive steps to protect their personal information. It is recommended to carefully review all financial account statements and health insurance explanations of benefits (EOBs) for any suspicious or unauthorized activity. Additionally, individuals may consider placing a fraud alert or security freeze on their credit reports with the major credit bureaus to help prevent new fraudulent accounts from being opened in their name.