Employment Law Questions? Ask an Employment Lawyer.
I am very sorry to hear this. You have a couple of options. First, you need to notify the Department of Health and Human Services of this breach if the breach was done by a medical provider. This would begin an investigation. Second, while the HIPAA laws do not give rise to a lawsuit, most states have laws against breach of privacy. You may need to file suit if you have proof of damages as a result of this disclosure. If you have any specific questions please feel free to let me know or we can talk by phone for an additinoal charge.