How would you handle your parent sending you confidential patient information?

My parent works in a healthcare setting with patients. She emailed me a detailed patient neuropsych report of her pediatric patient from her personal email, with a few small redactions but the patient name and other identifying information (family structure, number and ages of siblings, full list of diagnoses, etc.) remained. She has just left this position on good terms with her employer.

I have recently realized that this person is a narcissist and have gone no-contact with her, partly due to her egregious violation of HIPAA and her refusal to take any responsibility for this action, as well as other boundary violations and abuse.

I feel strongly that I should report this HIPAA violation (federally and maybe also to her state licensing board), but acknowledge that it may be the “nail in the coffin” of our relationship, and also that I will likely be viewed negatively within the family. But I feel complicit in this crime and am livid to have been sent this patient information for absolutely no valid reason.

Outwardly, my mother is very well respected and viewed as highly ethical and empathetic. But it is a different case behind closed doors. There have been decades of listening to her talk about her patients and clients in inappropriate detail, which I now realize was a part of her narcissistic supply.

I’d appreciate your thoughts and advice on how to manage this difficult situation.