Privacy invasion

Their staff is sharing client’s private information (Bank statements) with their friends without any permission from the client.