I can’t read the article due to paywall but from the headline, yes it violates HIPAA. Not sure if there is some trickery going on such as pretending to ask as another healthcare provider rather than as a cop. Pharmacies would then give the info thinking the other provider needed it for the care of the patient.