I think the fault can lie in him opening your mail, since these should have been addressed to you.

They can give under HIPPA your medical information to another insurance company, and they are...