I would send a formal complaint to the FTC for violation of FCRA 605(a), with a cc: to the CRA.

That should get some butts in gear.......