Any lawyer recommendations along with advice would be very helpful.
I run a marketing consulting agency that purchases ad inventory from another ad agency. I then resell this inventory to my consulting clients.
One of my clients contacted the ad agency that my consultancy uses (they figured out who I used) and requested data from my business account relating to their website. The ad agency gave them impression data and the financial costs that my company incurred for those impressions. This was done without my consent.
I was told before in writing that no one would be able to access my account except myself. Also from their privacy and data policy on their website this is made clear as well. My client is not a part of my company and the account is under my own company name. However my clients website name is listed in my clients section of my account.
After my client received the data including the costs I incurred (I mark up the prices) they decided to terminate their relationship with my company and purchase direct from the ad agency. This was a client for over 5 years, my largest client, and has ruined my company.
Am I able to sue the ad agency and reach a financial settlement of some kind? Their actions have ruined my business financially and I'm not sure what will happen with me personally because of this. Further, is what they have done illegal? Perhaps against US or GDPR data laws? I am a US company and they sent the data to Europe.
Any help would be greatly appreciated.