Legal Question in Business Law in Florida

Probably not, unless it was intentional. If intentional, you should look to the Fair Credit Reporting Act as it may be a violation.

If you are worried about your SSN or banking info being misused by the recipient, you may have a cause of action personally against the recipient if you become a victim of identity theft or other fraud.

If it was just a wrong business which received the info, ask them to shred it. If it was a person, ask them to shred it and hope they are 'good people'. If there are criminal, family or tax law issues going on, seek the advice of experienced counsel immediately.