Linda immediately reported the incident to the hospital’s privacy office, and investigators reviewed additional security footage from the parking garage. The driver of the SUV turned out to be James’s former business partner, Carl, a man I’d known for years. He wasn’t after my brother’s medical history out of curiosity. He was trying to prove James had hidden a medical condition during the sale of their company several years earlier so he could file a multimillion-dollar lawsuit.
The problem for Carl was that the records he’d obtained illegally wouldn’t help him. Hospital documents released without the patient’s authorization couldn’t be used the way he intended, and obtaining them through fraud only made his own situation worse. Within days, detectives identified the man who had posed as my brother at the billing office and discovered he had been paid to collect the records.
Fortunately, the envelope never left the city. Police recovered it before anyone opened it, and the hospital immediately notified every agency required under privacy laws. James’s personal information was secured, and additional protections were added to his medical file to prevent anyone from accessing it without multiple forms of verification.
When I finally told my brother what had happened, he sat quietly for a long moment before shaking his head.
“I spent months worrying about surviving the surgeries,” he said. “I never imagined I’d have to worry about surviving the people around me.”
A few weeks later, Carl publicly apologized after the investigation cleared James of any wrongdoing related to the business sale. As we left the hospital for James’s final follow-up appointment, he smiled for the first time in days.
“The doctors fixed my heart,” he said.
“But now I know who never really had it in the first place.”
