If they're large enough, they can get away with it, and the bank's insurance just eats the cost.

Experian routinely generates unauthorized credit card charges. The banks know, but they rely too heavily on the credit rating industry to stand up to them.