I'd be suing them for a breach of gdpr for sharing my personal details without my permission. They wouldn't have a leg to stand on.