Defiantly should be reported officially. Serious breach of Data Protection, and as you have stated in an earlier post this person works in a health related field and so should be fully aware of the confidentiality requirements of patient data etc.
If they have spent the time to dig deep into your records and then into related records just to find your contact details in this manner, just imagine what other "casual use" they may make of the data they have access to.
Similar to Keith, I have direct access and control over databases containing large quantities of sensitive personal data in my current job, and in a previous job i had similar access and responsibilities involving criminal justice data. Were I maliciously inclined, or just plain stupid, I would have/had the ability to do a lot of silly things with that information. Thankfully I take Data Protection seriously and I do not undertake any action that could compromise that. I learnt the skill of skimming over the data just looking for key information without looking into the details early on... some of the criminal justice data really did not bear close inspection on a full stomach!
... With great power comes great responsibility ...