Lenskart aqualens - Personal Details Shared

Lenskart has shared my personal details to some other customer though it was lenskarts mistake for placing their order in my account and refund was also initiated on my number for which I collected the payment and then sent to the customer whos payment it was. But how can lenskart not contact me and the customer there having all my information of my UPI I'd and my phone number as well and kept calling me. If lenskart shares details like this it can lead to loss of huge amount from my bank account. It was really a fraud now. I cannot believe how can a online platform share the details to some other customer