Is certain medical info private?

Location: California

I’m not too well informed about any of this but any response is appreciated.

On the 13th of February, I visited an urgent care for an issue I was having, got treated and paid my bill once I was all done, which was a for a bit under $200.

Today I got an invoice texted to me, from another “medical group” for $140. My name and address is on the invoice and even the date of my visit to the urgent care clinic. I called the urgent care clinic and they said they handle all billing in house so that’s not them. It’s obviously a scam attempt but my main concern isn’t how they got my name and address, I know that info isn’t too hard to find, my question is how they got info of my visit date and is this something I should be getting some legal assistance for?