So here's the thing:

In order to sue, you need a reason. If suing is super-duper easy and cheap, people will sue over everything. If suing is expensive, people will sue over things that will be profitable. An attorney will take a case on spec but only if they suspect they'll make enough, as their fee, to cover their investment of time.

You can absolutely file a HIPAA complaint. However, you will get no money out of it. If HHS decides your rights were violated, HHS will fine the violator. You will see nothing. So if you want personal redress, you have to be able to demonstrate that you, personally, suffered injury.

If you are a private figure, your anonymity has a value of zero. If you are a public figure, you likely don't do yelp reviews using your first name and last initial (Amy W.: "They tried to make me go to this rehab but I said, no, no no!"). If you are a private figure who becomes famous because of your yelp review you become a limited-purpose public figure and your anonymity has a value of less than zero.

In order for caselaw to advance on this one, a private individual would have to demonstrate that they experienced material harm from a pseudonymous HIPAA disclosure. I'm pretty imaginative, but off the top of my head I'm drawing a blank.