Can I sue a co-worker for spreading personal information?

I filled out a injury report and one of the questions in the report was if I had filled a injury report before, so the answer is yes. I had a previous back injury and I had a monetary settlement with the company, but there is no record of what amount i received or such a thing. An this co-worker whom was a manager substitute for the day is now spreading rumors about how much money I got, etc. There has been about 6 person that had asked me about this settlement and had gave me different amounts. I had never told anybody about my p settlement with my work place. Can I sue my co-worker, because as far as i know that is spreading personal information that should only be known between me and the company, Or should i talk to HR.