Unless his sources are in a medical practice or other HIPAA covered entity, none of them are violating HIPAA. Contrary to what many people mistakenly think, HIPAA isn't some broad-based "you can't reveal medical info" law. So the team doctor leaking info -- that'd be a violation. A trainer leaking info -- probably a violation. A coach -- probably not. A fellow player -- nope. Also, even if a covered person commits a HIPAA violation revealing info, it's not a HIPAA violation for the recipients of that info to make it public.