Weird question

Hi ladies,

So I was diagnosed with sciatic nerve pain. I texted my boss to let him know and when I finally returned to the office, everyone asked if I always had sciatic nerve pain. Is that against the law for my manager to disclose my medical information without approval? I told him not thinking he would broadcast my diagnosis to the entire office. This isn’t the first time he disclosed my personal information.

Should I bring this issue up to HR? I feel like this is against the law but not sure. Any feedback is appreciated.