Long story short; my ex-girlfriend contacted my health insurance carrier. W/o my authorization, my health insurance carrier gave her substantial information about me and my wife and my other children health coverage, and, our DOBs, SS#, dates of coverage, etc. The health insurance company also gave my ex-girlfriend a certificate of coverage showing who was covered and when, and, also apparently gave her on-line access to my health insurance coverage, physician info, and personal health information. I have copies of some of the documents that the health insurance company gave to my ex-girlfriend.

I contacted the health insurance company and they have beat around the bush, downplayed the entire deal, and even denied providing information in writing to my ex-girlfriend. They have dragged their feet and still haven't even set up a protection of my health insurance so that my ex or anyone else cannot get further information! Its really egregious and its all documented.

What gov't agencies should I contact to have the health insurance company fined & penalized, and, can I sue the health insurance company for all of this?

Thanks.

This does appear to be a HIPAA violation. Here is how to report it: Health Information Privacy