Breaches and incidents
Call-on-Doc (Dallas telemedicine): notifies patients of December 2025 breach after actor offered data for sale
Per HIPAA Journal, Call-on-Doc began notifying patients on 18 Sep 2026 that an unauthorized party had network access from 22 Dec 2025 to 3 Jan 2026...
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- Per HIPAA Journal, Call-on-Doc began notifying patients on 18 Sep 2026 that an unauthorized party had network access from 22 Dec 2025 to 3 Jan 2026 (suspicious activity found 28 Dec 2025); PHI compromise was confirmed on 19 Aug 2026. Data included names, contact details, diagnoses, medical information and visit types. The count has not been disclosed.
- Root cause: not disclosed.
- HIPAA Journal says a threat actor claimed the attack and tried to sell the data in January 2026, claiming data on more than 1.1 million people (unverified).
- Call-on-Doc says it has found no fraud.