Most Americans have very little choice but to provide their personal information to credit bureaus. Hackers have found a way into that data supply chain, and are advertising access in group chats used by violent criminals who rob, assault, and shoot targets.
Section 230. Not that I’m certain I want that law gone, but the host site isn’t liable for this behavior.