I am in the process of trying to have an insurance claim from a motorcyle wreck last summer taken care of by my insurance company. I was asked to send in a copy of the letter of denial from the auto insurance company so they could proceed with the claim. I sent in the letter, and received a call from another client of this insurance company letting me know they had sent him my letter. The letter included the claim number as well as my telephone number and address. I called the insurance company to ask about this... the gentleman said he would have the other client send the letter back. As of this week (2 months later), the other client has NOT returned the letter to them. Because my personal information is in someone else's possession, is this a HIPAA violation, and if so, what steps should I be taking?

Sounds like a simple clerical error.

You can file a complaint with the HIPPA complainace officer of the insurance company.

But understand while this is not right, mistakes like this do happen,