I sent Enhanced Recovery a DV letter a month ago after they popped up on all three of my reports. Today i received a letter from them stating that they removed the informatio from my reports, but that they included the validation info from the original creditor. The second page was not my info but were they had received someone else's payment and that there account was satisfied in full. This included that person's name, address, and account number. My fear is that this other person now has my account info. Please tell that at this is a violation and that something can be done!
Now that's a big oops. I'd contact them and advise them of this.
They will obviously assert no intent to disclose information to another party, and that it was simply a clerical error.
Absent willful intent, I doubt that you will get any legal remedy.
Hard to put the toothpaste back in the tube......