You may file a complaint--the Doctor's office may be fined by the governmetnt http://www.hhs.gov/ocr/privacy/hipaa/complaints/
There may be a cause of action for such an event under your state's laws. Contact an attorney in your area to discuss the incident in detail and determine if you have any grounds for further action. Best of luck to you.
NOT LEGAL ADVICE. FOR EDUCATION AND INFORMATION ONLY. Mr. Rafter is licensed to practice in the Commonwealth of Virginia and the US Federal Courts in Virginia. There is no implied or actual attorney-client relationship arising from this education exchange. You should speak with an attorney licensed in your state, to whom you have provided all the facts before you take steps that may impact your legal rights. Mr. Rafter is under no obligation to answer subsequent emails or phone calls related to this matter.