Debtco violation of POPI Act and rude staff

I got a call from a company called debtco. The call was unsolicited. they seemed to have my personal information including financial records and I never gave consent for my information to be shared with DebtCo. In addition the person on the call was very rude when I asked how he got access tomy financial records without my consent. Where do we report such companies for the violation of the POPI Act? and how do I stop these companies from calling ?