Personal information not safe with std bank

It's been 3 weeks with no feedback from std bank. On the 28th of October I received a call from a debt agency we clear debt. The call was regarding clearing my debt. I rep**** I don't need the service and I'm not in debt. They guy rep**** what about your home loan with std bank. He knew all my personal information in detail ! He knew the amount taken what my payment was and what my balance is on the home loan. I was shocked out my socks. And asked how do you have all this information. He said they got it from the bank and ncr. I have never given std bank permission to share my details with anyone. This is a bridge of the POPI act. I called std bank to follow up. They couldn't assist. The response i was given that they will request the recording and I must go into a branch to listen to it. 3 weeks later no feedback.