Breach of Privacy

I called Standard Bank to review my contact information listed for my Credit Card after receiving an email from them about MY credit card to an email address that is not mine.

They continued to ask me security questions and said the mobile number I gave is not the one listed, so basically you sending emails and SMS's about my Financial Information to someone else. Nevertheless, the agent continued to tell me that the email is not even listed on my profile so he does not know how it was even sent to that email address.

When I asked how long it will take to get back to me about this clear privacy issue, he said 7 days. So in the interim Standard Bank can continue emailing and SMS'ing my Financial Information to others?

I would call this an urgent matter in need of immediate action, not 7 days.