It almost doesn’t matter WHO leaked the records. The hospital is responsible for being sure they are secure. Could be, probably is, a very low level/low paid employee in, i.e., the medical records dept.
Scheme Team redistributing the wealth again?
The records probably weren’t released. Someone probably told someone else. Could have been another cop.