Has your t or pdoc (or their staff) ever violated your privacy by sharing information with an unauthorized third party?

The reason I ask is I unfortunately witnessed the receptionist at my pdoc's practice tell another client's personal info to someone else in clear violation of both ethics and HIPAA.

This receptionist has been with the office for years and is not young and so I doubt it is a case of her not understanding privacy laws.

I told my pdoc about it and got sort of a mixed reaction. At first she seemed to take it very seriously. Then she sort of brushed it off a bit until I specifically said, "Wouldn't the client have had to sign a release for that?" Then she admitted that yes, that was the case.

I guess I'm just wondering how often this happens.