2026 Neuro Wellness Spa — patient file emailed to another patient; protected health information disclosed
Data compromised
Protected health information: name, dates of service, provider and place of service, appointment and billing or service notes, chart and claim identification numbers, payment dates, methods and amounts, and other clinical and billing details. The company says Social Security numbers, driver’s license numbers and credit card numbers were not in the file.
Technical writeup
Notice dated October 9, 2026 and listed by the California Attorney General on October 16, 2026. This is a misdirected-email disclosure, not an intrusion. Count not stated. recordsAffected 0.
Root cause
On August 24, 2026 a file containing patient information was inadvertently emailed to another patient instead of the correct document. The recipient told the company on September 16, 2026.