Why would it not be legal to post but legal to PM?
Also curious about this
To hold someone liable the disclosure of facts must be public. PM are... private. In this case I think it's legal to post.
A plaintiff must establish four elements to hold someone liable for publication of private facts:
1. Public Disclosure: The disclosure of facts must be public.
2. Private Fact: The fact or facts disclosed must be private, and not generally known.
3. Offensive to a Reasonable Person: Publication of the private facts in question must be offensive to a reasonable person of ordinary sensibilities.
4. Not Newsworthy: The facts disclosed must not be newsworthy. Stated differently, the facts disclosed must not be a matter of legitimate public concern.
This is a matter of legitimate public concern and it doesn't offend anyone (perhaps the surgeon who did the botched job?). But I prefer to stay safe.
http://www.dmlp.org/legal-guide/publication-private-facts