Except in this case we're talking about private medical records. There is no way for them to have gotten those legally. They had to have bribed someone or coerced someone to get them, and that certainly is a crime.