There is no private right of action under HIPAA. You can file a complaint with the U.S. Department of Health and Human Services. If any of the California attorneys know of a state law that was violated, they can address it. I am a Virginia attorney. We have a law here that covers it.
[This communication is intended as general information and not specific legal advice, and this communication does not create an attorney-client relationship.]