That's easy -- FAX them a letter outlining their mistake, include a copy of the original CBR with the disputed account number hi-lighted, and send the report they sent you with the non-matching account number. Tell them they are in violation of the FCRA and they have 5 business days to correct the mistake, or you will be filing a defamation of credit suit and sending a complaint to your state's AG.