Can I sue both the offender as well as the insurance company for a HIPAA violation?

Question Details: My husband and I have a health insurance policy for our family. His ex-wife contacted our insurer and fraudulently accessed our account by presenting herself as me by confirming basic information - my name and zip code. she also changed our contact information from my husband's cell and our home address to her personal cell phone number and her home address. She isn't listed on the account in any way and has zero authorization to access anything of ours, let alone change it. She is HIPAA certified as well which I feel adds concern. We just found out yesterday. What are my options here?

IMPORTANT NOTICE: The Answer(s) provided above are for general information only. The attorney providing the answer was not serving as the attorney for the person submitting the question or in any attorney-client relationship with such person. Laws may vary from state to state, and sometimes change. Tiny variations in the facts, or a fact not set forth in a question, often can change a legal outcome or an attorney's conclusion. Although AttorneyPages.com has verified the attorney was admitted to practice law in at least one jurisdiction, he or she may not be authorized to practice law in the jurisdiction referred to in the question, nor is he or she necessarily experienced in the area of the law involved. Unlike the information in the Answer(s) above, upon which you should NOT rely, for personal advice you can rely upon we suggest you go to AttorneyPages.com and retain an attorney to represent you.