Medical Record Mixup?

Today I logged onto my medical record portal (location: MN, USA) to download my pathology report from a procedure in July 2026. When I went to download the files it showed up as me having 2 pathology reports back to back. I assumed it was just two different types of reports and downloaded them both to show a different doctor. When I went to upload the files I realized they looked like duplicate copies of the same pages. I clicked on each to double check I wasn’t sending multiple copies of the same information. Turns out I now have downloaded a copy of my pathology report from July as well as someone else who had the same procedure also in July. Now I know this is a huge HIPPA violation but I am not sure who I need to notify. Additionally this clinic took forever to schedule a specialized procedure that determines if I start an intensive treatment plan for me claiming my insurance company wouldn’t approve the procedure because the clinic had the wrong birthdate. When I called my insurance weeks ago asking to fix whatever had happened they seemed to have no idea what the clinic was talking about. At the time I just assumed it was an annoying clerical error. Now I’m wondering if they were calling my insurance with this other persons results and date of birth. This is not the first ick this clinic has given me but it most certainly is the worst. What actions do I need to take now to notify the proper authorities as well as somehow letting this person know their medical records have been partially leaked?