Contact the person or entity responsible for the disclosure, ask them to retrieve the disclosed records, and request that whoever received them destroy their copies. The responsible party may be willing to help you in the event that an error has occurred. Contact HHS to describe the alleged incident and request an investigation. If HHS uncovers any HIPAA violations, the agency may warn or discipline the person responsible for the disclosure, or refer the matter to the Department of Justice for prosecution.
You should treat her as a patient and a normal person, as you should treat any patient. Do not let personal connections get in the way of a professional mental disorder situation. Treat her with care and as a patient. At work play your role as coworker, and in the group play the role as caregiver.
