Not necessarily confidential
In the US, at least, the MD's name and billing ID number are not confidential, but are matters of public record and available in public databases. I don't know about email addresses. This might be a bug, but it isn't a scandal.
Biting the hand that feeds IT
