In the US at least, legally HR can tell them whatever they want. However if the supply anything besides employment dates, title, and whether or not they are eligible for rehire, they'll be open to a civil suit if the information given negatively affected their job prospects