VODACOM POPI BREACH

I am not a Vodacom customer however I have been sent somebody's (one of Vodacom's clients) statements which contains all their personal information by email, this has been ongoing for the past year. I have raised this previously and sent the statement back informing that this is a serious breach in terms of POPI, that I am not a client and I have received someone else's information.If POPI had commenced there would be serious consequences for Vodacom in releasing their clients personal information and obtaining and using my email address when I have never been a customer at Vodacom. Due to the increase in identity theft Vodacom should be placing sufficient controls to prevent this. I need to know how my email address was obtained when I am not a client ?? this needs to be rectified soonest.