It violates health privacy laws, doofus.
It’s lawlessness.
As much as I agree with your “doofus” remark, the people hosting the event were not bound by HIPAA regulations which pertain to health care providers. That people willingly gave up health information to strangers without any assurance that the information would not be shared boggles me.