I think something most people don't know is that ANY piece of information that can be used to identify a specific patient is a HIPAA violation. What you posted are definitive pieces of information that qualify but it's not limited to those.

I think the replier will have a hard time defending themselves if they are indeed a healthcare employee that has knowledge of the patient. Doesn't specifically say who the patient is but does confirm it's poster's kid. If that's easily identifiable via the same social media platform IDK what they'd hide behind.