I would first call the travel company of the person who improperly posted your itinerary for travel on her facebook account and make a formal verbal and written complaint over what trannspired with respect to the invasion of your privacy. I would also request that the employee be severely disciplined over what happened.As to legal action, I have a hard time seeing what your damages are in terms of set dollars and cents. Your distress (and rightly so) is difficult to set a dollar value for without you suffering any actual dollars in a set amount.