I somewhat agree that the whole document is sloppy, but I also think this conversation overemphasizes what is wrong with it. It is not as if the document simply accuses the journalist and leaves it there; it actually elaborates on what it means by “violated HIPAA” in that context (and please don’t make me start comparing it with current administration behavior).
There is also a broader question of how to properly handle what are, quite honestly, likely bad-faith actors — the journalist in this case. Should the office simply ignore the smearing campaign and the lies? Maybe. But this is already an issue even before accounting for the significant amount of money — pushed by a very small number of people — being spent against the attorney’s office.