I'm going to send the complaint. They've been sharing my PII without my consent and knowledge.

Nice that this time we get the company to admit it in public, and that they've been aware of that earlier but only acted now.