If this was in Costa Rica the appropiate way was to contact PRODHAB about the leak of personal information and Costa Rica CSIRT ( [email protected] ).
Here all databases with personal information must be registered there and data must be secure.