If he did and he knew it for a fact then he could release it. The poster is not a covered entity under HIPAA. It seemed likely to me since he didn’t know those people well that he would have had to obtain the information from the hospitals. If that is the case, they likely violated HIPAA