In December 2025, SpineZone, also known as Livara Health Medical Group, P.C., a San Diego-based physical therapy practice, experienced a data breach. The incident originated at Aesto, LLC, a third-party vendor providing data migration and archiving services to SpineZone. Patients were notified on or about August 26, 2026. The breach may have exposed patient names and protected health information. Specific additional types of data compromised were not publicly disclosed. The total number of affected individuals remains unclear. More details regarding the incident, such as the exact scope and additional data types involved, may emerge over time.