My sister had a recent hospital stay and when she received the bill in the mail they had printed her SSN along with the name and address? Is this a HIPAA violation? Is there anything she should do to protect her credit, or should she make any demands of the hospital? When she called the hospital they said "sorry" and seem to hope she will just go away. Thanks for any advice.