Almost 1,600 patients’ names, descriptions of services, and cost and dates of services were mistakenly made available online.