Releasing, sharing, or divulging the information may have been improper, but that still doesn't necessarily mean you have the grounds to bring a lawsuit. That's because the American legal system, in the vast majority of cases, only provides compensation for actual losses, costs, injuries, or damages. That is, someone can act improperly, but unless another person suffered a loss, the other person can't sue. (For example: you are *almost*, but not quite, hit by a drunk driver; the driver is clearly negligent, but you still can't sue them for a near miss.) So in your case, if you suffered some loss or damage due to this disclosure, you may have grounds for a lawsuit; but if the only thing you suffered was some embarrassment, a feeling your privacy was invaded, etc., there really is nothing to sue over.