AccidentalHealthcareHealthcareMisdeliveryCustomer Data InvolvedPIIFinancial accountLowContained

Wholeness Center -

bd_de55f65a1dcb0811 · schema v1 · pii pii-v2

Severity

Low

Discovered

Feb 23, 2026

Filed

Feb 28, 2026

To disclose

—

Affected

1state residents only

Confidence

66%

Full breach record for Wholeness Center - →

Wholeness Healing Center, PC (Grand Island, NE) disclosed a misdelivery incident where a patient's name and credit card number were inadvertently emailed to another individual on Dec 1, 2025. The breach was discovered on Feb 23, 2026. One Nebraska resident was affected. The recipient deleted the data. The center provided 2 years of credit monitoring via Epiq and notified HHS/HIPAA.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 84 days

Dec 1, 2025

Begins

Feb 23, 2026

Discovered

Feb 28, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Wholeness Center -
norm: wholeness center
Domain: wholeness.com

Name: Wholeness Center -
norm: wholeness center
Domain: wholeness.com
Industry: Healthcarellm

Discovered: Feb 23, 2026
Breach occurred: Dec 1, 2025
Undetected for: 84 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 28, 2026
Affected individuals: 1state-resident count only
Data types: PIIFinancial account
Attack vector: Misconfiguration
MITRE ATT&CK: T1535 Unused or Uncommon Cloud Storage
Threat actor: Internal
Regulator citations: Notifying the U.S. Department of Health and Human Services, pursuant to the Health Insurance Portability and Accountability Act (HIPAA)

During the incident: Reached out to the unintended recipient and requested that the information be deleted
Received confirmation that the unintended recipient deleted the patient’s information
Working to implement additional safeguards and training to its employees
Providing access to credit monitoring services for two (2) years, through Epiq, to the individual whose personal information was potentially affected by this incident, at no cost to the individual
Providing the impacted individual with guidance on how to better protect against identity theft and fraud
Notifying the U.S. Department of Health and Human Services, pursuant to the Health Insurance Portability and Accountability Act (HIPAA)
Provided written notice of this incident to one (1) Nebraska resident
Changes made: Implementing additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/7f2da897-6dc8-4296-b402-612ad0327f4d.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 28, 2026
Raw hash: a6a810c8178577240f837819182151b3ea30f6ad3ba2e0f4921988241f02bd89

Reporting entityWholeness Center -

Victim entityWholeness Center -

Incidentdiscovered Feb 23, 2026

Stated responseReached out to the unintended recipient and requested that the information be deleted

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov