Product: Credit reporting, credit repair services, or other personal consumer reports

Credit control corp, XXXX XXXX XXXX, has XXXXwo account listed under my social security number on my credit report which I disputed both accounts On XXXX XXXX, XXXX. I requested competent evidence that proves I have legal obligation to pay XXXX, such as the agreement with their client that grants XXXX, authority to collect on this alleged debt, agreement that bears the signature of the alleged debtor wherein he/she agreed to pay the creditor, complete accounting of alleged debt, and etc. see DEBT LETTER! 
They responded with an itemized statement which only addressed one of the accounts listed on my credit report, in direct violations of HIPPA and missing important information I requested. For ex. CONTRACTUAL obligations, and complete accounting of alleged debt! The itemized statement only addressed XXXX account listed XXXX which is inconsistent with the credit bureaus account #. Also the original balance, and first delinquent date are Inconsistent with the listed credit reports I have provided. 
The itemized statement also list my full social security number which I have not given to XXXX, who I have no CONTRACTUAL OBLIGATIONS with or knowledge of until I check my credit report. NOT ONLY did I not consent to XXXX  having my Social security number but they sent my sensitive personal information ( Social security, along with my birth date ) through the MAIL to an DIFFERENT address that was not yet listed on my credit report, without any proof on who was receiving this PERSONAL information about this COMMUNICATION. XXXX see reports provided ) The itemized statement also mentioned PERSONAL MEDICAL INFORMATION IN REGARDS TO an X-ray on Ankle and a Walking boot provided which IS A DIRECT VIOLATION OF HIPAA! 
BY THE ITEMIZED STATEMENT NOT PROVING CONTRACTUAL OBLIGATIONS, its basically committing false and misleading representations, social security fraud, defamation, negligent enablement of identity fraud, EXTORTION, AND is in direct violation of the FDCPA and the FCRA! 
BY NOT providing an audit trail of the said DEBT I also have no clear way to understand how much the listed insurance company paid to the alleged debt. 
A response to CCC letter was sent out on XXXX XXXX, XXXX requesting once again for both account numbers any agreement with there client granting them authority to collect on the alleged debts and any agreement that bears my signature where I agreed to pay the creditors and a copy of HIPAA authorization which I RECIEVED NO Response. 
Also on XXXX XXXX XXXX, I sent out letters to the alleged creditors which was listed in XXXX tradeline on my CREDIT REPORT, XXXX physician services pc and Emergency physicians of XXXX, notifying them both of there breach of security which I RECIEVED NO response from NEITHER! 
Another Dispute and third final attempt to correct the matter with XXXX regarding both accounts in there possession, was sent out on XXXX/XXXX/XXXX, which I still RECIEVE NO Response. XXXX has updated, verified, and maintained Defaming activity in regards to both accounts reporting on my credit file without proving CONTRACTUAL obligations, Audit trail of both accounts and without addressing account number XXXX, and putting it in a dispute status WITHIN 30days.