the woman with syphillis who's medical records were breached and posted on facebook

has sued the individuals as well as the hospital. The hospital says its investigation showed only one employee was involved. The patient claims there were 2 employees involved.

http://www.cincinnati.com/story/news/2014/06/06/uc-health-outraged-employees-facebook-posting/10067089/

Officials at the University of Cincinnati Medical Center took "swift" action to fire an employee as soon they were alerted that a patient's private medical information had been posted to Facebook, said the hospital's top executive, Lee Ann Liska....

...The patient, Shawntelle Turley, is also suing Ryan Rawls, named as an employee of UC Medical Center, an unnamed employee at UC Medical and Raphael Bradley, her ex-boyfriend.

Turley claims that Rawls, along with the unknown nurse at the hospital, posted records online at the request of Bradley. The lawsuit also claims the health system and UC Medical Center negligently supervised Rawls and has not done enough to identify the other unknown employee allegedly involved....

"We took swift action and our investigation revealed that the record had been accessed by a financial services employee who did not have a business reason to do so," Liska said. "This employee had been fully trained and acknowledged her responsibilities under law and UC Health policy, but apparently accessed the billing record through a personal motivation. The individual's employment was terminated, and we reported the incident to federal authorities."