A patient of the practice that I work for no showed for a follow up visit to a work related injury. The employer came into the office to let know that he has also no showed at work and wasn't sure if he would be in for his appointment. A employee called the patient herself and when he could not be reached she proceeded to give the patients personal info to the employer. Is this a HIPAA violations?