What did they disclose? And to who?
It appears that they inadvertently disclosed it to her, which is neither a violation of HIPAA nor slander. They also apparently discussed it among themselves, but that really isn't a public disclosure. Moreover, they arguably have qualified privilege to share otherwise slanderous comments among themselves so long as they are not motivated by malice. They are free to express personal opinions regardless of what she thinks.
But she published the statements to the world. Damages, if any, from slander are likely nominal at best.
They were rude in the opinions they expressed about her among themselves, but I don't see that they necessarily did anything actionable. Even negligent infliction of emotional distress would be a loser unless they could tie it parasitically to another tort.