Call-On-Doc allegedly had a breach affecting more than 1 million patients. They’ve yet to comment.

A forum listing claims telehealth provider Call-On-Doc suffered a breach in early December, with 1,144,223 patient records—including contact information and sensitive medical/STD details—exfiltrated and offered for sale; the listing includes screenshots and a 1,000-record sample, and the seller accepts escrow. Call-On-Doc has not confirmed or responded to inquiries, raising questions about HIPAA applicability, FTC oversight, and state notification requirements, though the report cautions the data has not been independently verified.