Pathcare Somerset West

I went for tests that were done by PathCare Mediclinic Vergelegen, Somerset West, I settled one account and they informed me there will be a second account to be paid. Two days later they phone me to inform me that I paid to much on the first account and I asked them to please show the credit on the second invoice and I will pay the outstanding amount. Today they've sent my PERSONAL information and results to my boss and now the person who sent the documents is now just missing. How can they just send personal info to someone that is not even remotely related to me.