Release of personal information to unauthorized persons

I have a payday loan with Cash Transfer Centers. They were trying to "verify" my employment, job title, last payday and social security number with my HR department so they could attempt to collect from my payroll. They sent an e-mail, which I was copied on, to the wrong person. They divulged my personal information to someone else who works for the same county as I but, who has nothing to do with department I am in. Is there anything I can do?