GDPR breach utility company

I have been informed by my water supplier that they had a data breach in which customers details who pay by direct debit were stolen from the site and posted on the dark Web, which includes mine?
This is a major data leak, where and how would i go about complaining about this in order to get some compensation?

breach compensation customers dark dark web data data breach data leak gdpr leak major order pay privacy stolen supplier utility water web