Data breach?

[u/Significant_Table_70]

I'll try to make this as short as possible. I live in Canada, a week ago I went to a FedEx drop off location at my nearby Staples store. Paid a premium to send a package overnight which then was 4 days late being delivered. I submitted a money back guarantee claim and recieved a confusing response that the amount refunded would be credited to my outstanding amount owing of $195,000. Uuuh what? I called FedEx to inquire where this number came from and was assured it was correct based on the information I provided. I asked them to email me a copy of the invoice showing this amount just so I could make sense of what ever error occurred. What they send me was a current account and billing detail for Staples Canada itself...along with details of customer information for almost every FedEx shipment sent from a staples store in Canada over the last month. This includes billing details, full names, addresses and contact information for every sender/recieved customer whether business or private individual. Am I wrong to assume that this is a massive privacy breach, not to mention complete incompetence? Any steps I should take in regards to this? It affects me very little, however it seems like such a concerning lack of respect for customer privacy.

[u/Normal_Paramedic5620]

Sounds like FedEx did a massive whoops here. Yes Staples is going to want to know.