I looked at the source code of my website and noticed that an additional email address is listed as a recipient for web leads. We spend a lot of money on internet advertising and this is valuable info that could be stolen.
      Answer1:Start by asking them to fix it. It could be a legitimate mistake
      Answer2:Yes sue them and change hosts immediately, You have every right.Let me know how everything goes?Good luck