Hi! I don't know in which country you are, but in Canada you should call a lawyer right away and also delete this post just for good measure.

The using your personal data might be illegal just as creating a hostile work environnement/harassement/whatever material and emotional damage you could argue.

I don't recommend escalating through HR - if your personal data has been used I would not feel comfortable with anyone there, and they can take action against you before you do if they smell foul (same situation is happening to a friend of mine)

Good luck!