Neuro Wellness Spa Data Breach: What Information Was Exposed?

Neuro Wellness Spa, a mental health provider, has announced a data breach that may have exposed personal and health-related information belonging to certain individuals. The incident was first disclosed in an attorney general filing on October 9, 2026, and has been described as the result of a misconfiguration.

What Happened in the Neuro Wellness Spa Data Breach?

Neuro Wellness Spa provides mental health care, including TMS (transcranial magnetic stimulation) treatment, through psychiatrists, nurse practitioners, and therapists. The incident was disclosed on October 9, 2026, in a filing with an attorney general.

According to a breach tracker’s summary of the disclosure, the incident was a misconfiguration, meaning information was left accessible because of a settings error rather than a targeted attack. The details of what happened have not been widely published. The date of the misconfiguration, how long the information was accessible, and whether anyone actually viewed or took it