When I worked in a transcription office for a hospital one of my co-workers accessed my medical records. I only became aware of this by going into the audit trail of the reports myself (which I found out later was also against the rules) and I saw the woman's name on several of them. I made administration aware of the issue and I was basically told that I shouldn't have been in the reports either. The person who looked at my confidential medical files got in the same amount of trouble that I did... for looking at MY OWN files. Should more have been done?

Apparently not. How long ago was this? You say "worked."

In my facility you both would have been fired with no questions asked. Consider yourselves lucky.