Open Question: Medical Pratice, being sued I need some opinions please!?

Assume you are the office manager for a medical practice in a small town. An insurance claims assistant leaves a completed insurance report on her desk in plain view, and a clinic visitor reads it. The visitor knows the patient listed on the insurance form and tells mutual friends of the patient's treatment. The patient threatens to sue the clinic for breach of confidentiality. Does she have a standing to sue? As the office manager, what should you do?