Not your fault, IMO...only the medical officer should have asked you or your physician about specific positive results, and ONLY if they showed up. HR should never have asked for or seen ANY of your meds, especially not a full list!

It seems to me our exact rights can be hard to find, we are not told them when getting the test, and some (not all) employers are more than happy to take advantage of that situation.