It's possible that your information is flagged in a third-party risk monitoring system that these companies all use. Perhaps something like ThreatMetrix, from LexisNexis. There are others that operate in this space as well.

As for how to fix it, I'm not entirely sure. Since you are located in California, you might make CCPA requests to retrieve and then delete all of your data from as many companies as possible.