no problem
company can not release employee information since it has legal liability to keep it confidential. If your friend did not get the job due to what they released, she may have a case of disfame in court. No company would risk a legal litigation.