Hi, I'm new here, though I have been reading for a couple of days. I received the same generic message from Mrs Meldrum too. I was just going to overlook it, but after reading through I'm not sure I will - I didn't even realise it would be classed as a data protection breach!
There is an interesting article on Which - hopefully linked which details steps.
If you become aware that an organisation has lost your personal data, there are steps you can take to protect yourself and, in some cases, claim compensation following a data breach.
www.which.co.uk
Although it highlights mostly large data breaches it also states
"But it is also a personal data breach when companies send your personal data to someone else without your consent"
As Mrs M has mentioned malicious content - directing someone to articles by the National Press in the Public Domiain etc is NOT malicious content, and has also mentioned police & lawyers as well as the fact that information has been received by her that you have been in touch in company you can claim that her contacting you has caused distress.
Which state it is important to note that you can now make a claim for compensation relating to distress alone - you do not need to have suffered any financial loss.
People have to report this, perhaps you think 'Oh I won't bother' ....that is exactly what the directors of Mrs Meldrum are hoping.
Mrs M cannot claim ignorance as a defence.