An attorney's office sent our medical office a request for patient information signed and dated by the patient. Two months later the same office sent another request which was an exact duplicate of the first with the date changed (if you hold them up to the light they are identical) what they did was attempted to white out the previous date (not completely though). They provided a document that they represented as being signed on a certain date (which it wasn't, I checked with the patient) is that legal?

No. If the patient confirmed they never authorized the second request, they have a case of malfeasance against the attorney.