Breach of security

A couple of months ago I requested that my credit card statements be sent to me via email. I realized today when looking for something in my emails that my statement was cc'd to a strange email address. I called the card division immediately and received a ref no. I was told the email address cannot be removed before investigation has taken place. The name is much the same as mine, with a telkom email address. I have found before that systems randomly pick telkom email addresses (I received a stranger's etoll account in the same way). I NEVER gave Nedbank any other email address than my gmail and this email address IS NOT MINE. I see it as a serious breach of security. I have been with Nedbank for 35 years and 99% of any problems I had through the years have been with the card division - and few huge ones, I might add! Furthermore I bank with Nedbank and find it totally unacceptable that one cannot sort out card problems at a branch - one always has to call the card division and seldom get good results. I insist that the strange email address be removed from my profile IMMEDIATELY!