Does it matter? If they authorized a brand reputation company to harass random third parties without runnit it by them firs then it's still their fault.