Affiliate Marketing Secrets

About a month ago I discovered my laptop hacked into. BT changed my password/e-mail address, but I kept the ‘old’ yahoo! e-mail address & password as I was still accessing e-mails from other ‘alerts’ & friends. However, today as I was reading an e-mail there was a pop up from facebook with a ‘new info’ as to being unfriended (I had not been on FB for months & was about to disconnect) – I clicked on 2 signs & a picture of me & my little girl displayed! I did not post this to facebook. On the 2nd sign (Word Document) I discovered sensitive , confedential medical information as to a complete stranger signed by a Professor/ Pulmonologist. I googled several London hospitals until this person’s name came up and contacted same & relayed the information as above. Apparently the same medical person [is] working at this hospital & I have to re-call tomorrow,
I tried contacting FB but, at the costly sum of £1.70 per minute I terminated the call & have tried other avenues as to resolving this question: How would the hospital in question have my e-mail address & submit delicate, private information – and most importantly, how/why did FB become involved? I’m getting no-where hence posting the question here as my account with yahoo!.
I believe this can be construed as criminal, but before I alert the Police I would appreciate assistance as to resolving this worrying ‘error’ (not on my part).
I have never given my bank details via the internet, so whoever ‘hacked’ into my account/e-mail address would have nothing to gain aside from personal information i.e. friends/hobbies via FB.
But, the confidential details as to a patient is a tad scary and especially being sent via FB.
I would appreciate any help shedding light on this problem. Thank you. Lisa London UK.