Good luck getting any recompense. CBA disclosed your phone number. I'm aware of a company that disclosed 3000 high resolution colour passport scans, along with all personal details from a travel booking website. About half of the records were for school children. No one was notified that their data was leaked. Diddly squat happened to that company.