I'm sure that's true. I just meant suing in civil court in general for emotional damages stemming from HIPAA violations which enabled a stalker. It's not suing for the breaches, it's suing for the damage caused by the breach. But also it seems like an uphill legal fight when the hospital seems to have dismissed all the violators. (And that's assuming the stalker has a police record, restraining orders, etc)