cause no one if taking action. If really want to do something then can sue them. You got their number. Means can track them. Sue for invasion of privacy and find out how they got the information. Then sue the person/company the gave them your contacts. This will make people think twice before selling user information in the future.

Unfortunately, this is too much hassle. Nobody have the kind of time and money to do it.

A class action lawsuit would be the best way to go.