The information that person X owns Y shares is private cap table info. Carta breached that privacy by using it for lead generation
But I hope people wake up to what they are agreeing to when they sign up as a user for Carta. Carta makes you agree that they owe you NO duty of confidentiality with respect to any information you submit into the service.