You can't sue them: there is no general legal obligation to not dislose this (the way is a legal obligation to not disclose certain health-related information [e.g. HIPPA]), and so there is no cause of action; and even if there had been a cause of action, you can only sue for losses or damages you can prove you suffered from this disclosure--no losses or damages, no lawsuit.You can certain complain about this to the insurance company(ies) they represent.