Just FYI, here is some relevant info:
An eligible student may obtain a complaint form by calling (202) 260-3887. For administrative and privacy reasons, we do not discuss individual allegations and cases via email. Please mail completed complaint forms to the Office (address below) for review and any appropriate action.
Complaint Regarding Disclosure
If an eligible student believes that a school has improperly disclosed personally identifiable information from his or her education records to a third party, the student may complete a FERPA complaint form and should include the following specific information: the date or approximate date the alleged disclosure occurred or the date the student learned of the disclosure; the name of the school official who made the disclosure, if that is known; the third party to whom the disclosure was made; and the specific nature of the education records disclosed.