There is no private cause of action under the Health Insurance Portability and Accountability Act. You can report your employer to the Department of Health and Human Services for violating the confidentiality laws. You also need to report to work because that is a separate issue unless the specific state where you are located has held that not reporting to work because your employer violated the Health Insurance Portability and Accountability Act was a public policy reason not to report to work. I am aware of no state where the public policy exception to "at will" employment would be so broad as to allow you to not report to work based on this violation.