Uh, no, the headline pretty straightforwardly describes what is happening. These are private firms, they should frankly have zero recourse other than simply not doing business with that customer again and reporting to other private firms that track credit scores.