> It keeps happening because there are no consequences for it happening

Worse than that - the consequences are positive for Experian: "For now, Rishi has decided to pay Experian $25.99 a month to more closely monitor his account for suspicious activity".