Lebara leaks information about other accounts

It is not as critical as it may sound at first. There are at least some endpoints in their API that do not verify if the given mobile number matches with my account. Like the registration details.

I wrote them on two channels multiple times but they don't answer at all.

How would you handle such a situation?