Am I reading this article correctly, that the IRS didn't sieze medical records but rather a collection of records that included a small number of financial records they needed and then a large number of medical records they didn't care about?
"...According to the case, the IRS agents had a search warrant for financial data pertaining to a former employee of the John Doe company..."
I wonder who gained access to this data after it was seized?
What political party hack would not want access to "psychological counseling, gynecological counseling, sexual/drug treatment and other medical treatment data" of current or future political figures?
And probably more than they usually want to know about these things.
Reading http://www.courthousenews.com/2013/03/14/55707.htm it seems like the John Doe Plaintiff is a hosting company or datacenter, not the HIPAA covered entity.