They've also contacted my emergency contacts in an attempt to collect payment for blood tests when they made a mistake writing down my insurance information... that was already sent to them by the doctor ordering the test. The link to the receipt in the text message listed enough details about the blood tests to deduce some very private information.

I have never in my life seen a more flagrant and willful violation of HIPAA. It's the only time I have ever contacted my state AG or the HHS.