Can a finance company share my account information with another person i did not authorize them to?

i had a finance company call people i know when they were trying to contact me, and they told them all of my account info, as far as amount, status etc... i know this company violated some laws when they did i just don't know what laws, and i'm writing them a letter to war them of my impending litigation