Hipaa specifically allows for disclosure of PHI for public health, safety and law enforcement purposes. I am not a lawyer but I think your malpractice carrier is full of it. I would call the police.
Bill Leeson, M.D. Solo Family Medicine Santa Fe, NM