This is why you should not go to a therapist who uses electronic records. This will happen to you at some point.
There were multiple failures here, but a single step could've prevented the entire hack: industry-standard encryption of the sensitive information.
Apart from therapy, I expect a lot of sensitive and private information to be hacked and released in the next 10 years. Most importantly, all non securely encrypted text based communications.
Using your face or fingerprint to unlock things, which anyone can steal. Many people even have their retinal scans stored in their opticians' databases which won't be secure either as biometric ID.
And yeah, as the previous commenter said - those are not quite comparable.