Honestly this just sounds like someone messed up and sent the records before they were sanitized, they were redacting PII left on the document that were not pursuant to the request.

As much as I like to call out corruption and etc, this is just sensationalized.