> This seems to clearly be a breech of confidentiality of her
>medical records.  Does anyone know how she might prosecute with limited
>funds?

Rather than prosecute, why doesn't she start by writing letters to her
doctor, the clinic, and the insurance company, explain the situation, tell
how distressing it was for her to have the formula and letters sent, and ask
them if they can enlighten her as to how a formula company might have gotten
her name and address and due date.  Then she will know (if they fess up) and
perhaps they will have been made aware that whoever is giving out the
information needs to cease and desist.

Kathy Dettwyler