Medical personnel could have gained access to this data via a VPN or HTTP Tunneling service. That they are instead directly selling the data offers no debate as to the actual intentions of making it...