This sorta happened to me, except as soon as I got an email from Experian that my email address had been changed, I got to work talking to customer service to g

This sorta happened to me, except as soon as I got an email from Experian that my email address had been changed, I got to work talking to customer service to get back in. The CS rep had “no record” of anything out of the ordinary happening, just a regular email address changed “initiated” by me, when instead it was this brain dead system they have where anyone with the relevant SSN and security question info can register your account anew with a different email. Once I got back in I saw credit pulls and immediately contacted the companies to figure out the car dealership in question, then called them to let them know that they should under no circumstances sell that car.