It likely violates GDPR law (or other laws relating to processing medical information), which could land you (and your daughter) in actual legal trouble, should Shannon want to pursue it.
Rather than opening your post with a sincere apology to Shannon, you place yourself as a victim first and foremost.
And I don't think it's an isolated incident - your response to the user 'notveryinteresting' was really not nice either.
I've reported your post to the admins.