You do not have a viable case yet, based on what you write. Yes, the hospital was negligent, or careless, and that could create liability. But you need more than liability for a viable case: you also need damages, or some loss you suffered, because the law only provides compensation for actual losses. If the accidental release of your records has not harmed you--e.g. there was no identity theft or fraud due to it--then you have no damages and would not receive compensation. If that changes and you do suffer a loss due to this act, then at that point, you may have a viable case.