An unauthorised third party has my personal information and an unauthorised bank card

A third party is still in possession of my personal information, as well as a bank card that I did not authorise.

I did manage to cancel the unsolicited and unauthorised bank card at a branch.

It should not be physically possible for any cards to get issued without me being physically present to authorise it, and the bank being in possession of the biometric data to prove this much.

It should never happen that personal information gets breached to third parties.