rehabilitation clinic data leak