Prospective Employer Disclosed My Pre Employment Drug Screen Result To People At My Current Workplace

Location: Washington state.
I recently applied for a job with another company and was required to complete a pre employment drug screen. The specimen was reported as “not human urine.” The company did not move forward with hiring me.
After I was notified I texted the hiring manager and specifically asked if anyone else would be notified about the result. He responded “No” and told me HR keeps a record of it. I still have this text conversation.
Five days later an employee of that company who works under the hiring manager texted one of my current coworkers. He specifically stated that my test “came back as non human urine” and said I would “never get a job here.” There was also speculation about me using marijuana. I have screenshots of this conversation and know the identity of the employee. He previously worked for my current employer which is how he knows my coworkers.
I have since learned the information spread further than that conversation. The coworker who received the screenshots already knew about the test. Another coworker had discussed it in front of multiple employees and made a joke saying “it’s not human.”
At this point information from my pre employment screening appears to have made its way from the prospective employer into my current workplace. It has now been discussed among multiple people.
I’m also active in the recovery community. Rumors or speculation about drug use could have a serious impact on my personal and professional reputation.
I understand this may not technically be a HIPAA issue once the information is held by an employer. I also understand the accuracy of the original test may be separate from whether the information could legally be disclosed.
Could disclosure of a pre employment drug screen result to people who had nothing to do with the hiring process potentially be an invasion of privacy or breach of confidentiality?
Does it matter that the information has apparently spread to multiple people? Does the hiring manager telling me in writing that nobody else would be notified have any legal significance?
Should I speak with an attorney before contacting the company or HR? Would a preservation letter make sense in this situation?
I have preserved the screenshots and my conversation with the hiring manager. I have not contacted the company about the disclosure.
I’m mainly trying to determine if this is something worth bringing to an attorney rather than trying to handle it myself.