Location: Pennsylvania
This has been ongoing for the last 10 months, but I only now am finding out who this was.
Last year I was sent to my company’s contracted health clinic for a check up for a reaction I was having that was preventing me from working. Around that time I began to receive incessant follow requests on my Tiktok account (which does not have my name on it) from an account tagged with “People you may know.” I didn’t know who it was so I kept declining the requests, but they would keep reappearing the next day. I thought it was a glitch and just kept declining the requests until maybe 2 weeks ago, when I just outright blocked the account.
Then I received a text message directly to my phone number wishing me happy birthday. From an icloud account with the same contact photo as the profile picture from the Tiktok account that I had just blocked. After a brief spiral I realized from the account’s posted videos that the person was an employee from the clinic I visited, and I believe him to be the one who did my screening questions last year before I saw the doctor.
Honestly I’m freaked out, because he also added me on Snapchat at some point last year. If he accessed my health forms to find my phone number, then he has my email, home address, and work address. But also, this is clearly a violation of HIPAA. I have reported this to my HR, who has reached out to the clinic, but I don’t know what other steps I should take. I’m not sure if this is worth escalating past them conducting an internal investigation. Any advice on courses of action would be greatly appreciated, thanks in advance.