We had a pharmacy tech resign, then go to work at a grocery/pharmacy - the tech has used PHI to target our patients and entice them to transfer their prescriptions. As a result of employment at our pharmacy, the tech knows meds taken, what kind of insurance ie Medicaid, etc. Is this a HIPAA violation?