alt Hacker NewsI think this entire thread has run its course; if it's not this detail, it'll be another, as a few others have already moved goalposts further down the discussion than the ones you're setting here.
But if you wish to sate personal curiosity, it is in his Substack, linked from the first link I posted, which was itself from the link posted by its GP.
The only thing that seems remotely related to your claims is this:
What's your problem with what happened exactly? Is it your position that your "private information" cannot be used, ever, to expose what some see as a medical scandal, even though it cannot identify you or in any way be associated with you? What does "private" even mean to you if sharing this dataset did not violate HIPAA?