Max M.
Google
Allina Health chose to outsource its lab processing to Quest Diagnostics. That decision resulted in my lab results — including my name and date of birth — being released to the wrong patient, a HIPAA violation.
Allina leadership should be aware that I was not notified for more than a month after this breach was discovered, and only after I contacted the clinic myself to ask why my results were missing. As of today, I still do not have my blood test results — but another patient does.
This was not handled with urgency, precision, or care. Even the notification letter/envelope reflected a lack of basic attention to detail, including incorrect state abbreviations (MI instead of MN). That kind of sloppiness is unacceptable when responding to a privacy breach involving protected health information.
Leadership sets standards. In this case, the standards for vendor oversight, patient notification, and accountability were clearly insufficient. Patients should not have to chase down their own test results after a HIPAA violation — or wonder who else has access to their medical data.
EDIT (after Allina reply): I have already contacted the clinic regarding this issue. The problem is not a lack of access to the clinic manager, but the handling of a confirmed HIPAA violation involving Allina’s lab vendor.
This situation involves delayed notification, conflicting information about the status of my specimen, and the fact that I still do not have my test results, while another patient received them in error. That is not something a front-desk phone call can resolve.
I am sharing this publicly because it reflects broader issues with vendor oversight, escalation, and patient notification — not because I need help finding the clinic’s phone number.
