A healthcare worker gives a coworker information about a patient that the coworker is not taking care of. The information is leaked. Who is liable by law?

The healthcare facility is liable.

The individuals who shared the information and the healthcare facility are liable.

The individuals who shared the information are liable.

Neither the individual nor the facility is liable since this was a mistake.