The Clinical Laboratories Improvement Amendments (CLIA) permits clinical laboratories to release test results only to an individual authorized under state law to order or receive test results and, if applicable, the individual responsible for using the test results and the laboratory that initially requested the test. The majority of states have licensing laws that expressly address to whom a clinical laboratory may or must release test results.
In some states laboratories may not even release testing information to the patient. I am not an attorney, but it seems possible that in your case the lab illegally furnished results to a non-patient. You should probably consult an attorney in order to determine the legality of this in your state.