HIPAA can be violated without giving a name, if certain details are disclosed; eg the only 6 year old in the state with rickettsiapox who was admitted on December 21.
Right that’s why was careful to say ”identified” and not “named”. If you give someone enough information to infer with certainty a patient’s identity without express permission from that patient, you’re cooked.