The latter has happened to me before, except I've never used a recruiter in my life. The recruiter had copied my LinkedIn profile into a Word document and had sent it to loads of companies, including my current employer.
Nothing really came from it. That company had a bad view of recruiters from the start, so they laughed it off as another incompetent recruiter.
In your case, you could try asking the recruiter why he did this. A response will let you know whether you are dealing with a malicious recruiter or a incompetent recruiter. Either way, reporting him to his boss would be the best course of action afterwards.
Nothing really came from it. That company had a bad view of recruiters from the start, so they laughed it off as another incompetent recruiter.
In your case, you could try asking the recruiter why he did this. A response will let you know whether you are dealing with a malicious recruiter or a incompetent recruiter. Either way, reporting him to his boss would be the best course of action afterwards.