Business credit report provider Dun & Bradstreet has agreed to a $5.7 million settlement with the Federal Trade Commission over allegations that the firm violated the terms of a 2022 order it had already entered into with the agency.DOCUMENTED Consent order violations of this kind carry a different weight than a first-time enforcement action: the company had already promised, under legal obligation, to change the specific conduct at issue.
Dun & Bradstreet is one of the largest providers of business credit reports and identifying data in the United States, supplying the scores and profiles that lenders, suppliers, and other businesses use to evaluate whether to extend credit or enter into contracts with a given company.
- Dun & Bradstreet agreed to a 2022 FTC order addressing its business credit reporting practices.
- The FTC alleges the company subsequently violated the terms of that 2022 order.
- The new settlement requires Dun & Bradstreet to pay $5.7 million.
- Business credit reports, unlike consumer credit reports, are used by lenders and suppliers to evaluate companies rather than individuals.
- A prior consent order violation typically strengthens the basis for a civil penalty, since the company has already agreed to specific compliance obligations.
What the alleged violation involved
The core allegation in the FTC's action is not a new type of misconduct but a continuation, or recurrence, of conduct the company had already agreed to stop under its 2022 order.DOCUMENTED Enforcement actions that allege a violation of an existing order typically carry lower evidentiary hurdles than a fresh Section 5 case, since the underlying conduct standard was already established and agreed to by the company itself — the question becomes whether the company complied with terms it had already accepted, rather than whether the conduct was unlawful in the first place.REVIEWED
Business credit reporting occupies a less consumer-visible corner of the credit reporting industry than the familiar three-bureau consumer credit system, but the reports these companies generate directly affect whether a small business can secure a loan, a lease, or a supplier contract. Errors or improper practices in this space can therefore have outsized effects on business owners with comparatively little visibility into, or recourse against, the reporting agency's internal practices.REVIEWED
Why order violations draw scrutiny
FTC consent orders typically remain in effect for twenty years and require the company to submit to ongoing compliance reporting, giving the agency a built-in mechanism to monitor whether a settled company has actually changed its practices.REVIEWED When the agency identifies conduct that appears to violate those terms, it can pursue civil penalties without having to relitigate the underlying legal theory from scratch, since the order itself already establishes what the company is and is not permitted to do. That structure is part of why order-violation cases, even when the underlying conduct might otherwise draw a smaller penalty as a first offense, often result in penalties reflecting the added seriousness of noncompliance with an existing federal order.
Terms of the settlement
Under the new settlement, Dun & Bradstreet must pay $5.7 million to resolve the FTC's allegations that it violated the 2022 order.DOCUMENTED Settlements of this kind typically also renew or extend the company's compliance obligations going forward, reflecting the fact that a violation of a prior order is treated as evidence that the earlier compliance structure was insufficient on its own to change the underlying practice.REVIEWED
The company had already agreed, under a 2022 federal order, to change the very practices the FTC now alleges it continued.
Why the case matters
For companies operating under existing FTC consent orders across any industry, the Dun & Bradstreet settlement is a reminder that the agency's monitoring authority does not expire once an order is signed and the initial news cycle passes. A settled order is not simply a one-time penalty; it is an ongoing legal obligation, and the FTC's willingness to bring a second enforcement action against the same company over the same underlying conduct signals that compliance monitoring under existing orders remains an active part of the agency's enforcement work, not a formality left unchecked once a case is closed.
How order-violation cases typically come to light
FTC orders generally require the settled company to submit periodic compliance reports and, in many cases, to retain records that the agency can review or audit without a fresh investigation from scratch.REVIEWED Violations often surface through a combination of these mandated compliance filings, continued consumer or business complaints about the same practices the original order was meant to address, and in some cases a company's own disclosures during a routine compliance check that reveal the underlying conduct never actually stopped. The specific mix of evidence behind any individual order-violation case is rarely made fully public, but the pattern across these cases generally reflects a gap between what a company promised on paper and what it continued doing operationally.
Why business credit reporting gets less attention than consumer reporting
Consumer credit reporting draws far more public and legislative attention than its business-facing counterpart, in part because individual consumers, rather than corporate entities, are the more politically salient constituency for credit reporting reform.REVIEWED But the business credit reporting industry serves a similarly gatekeeping function for small and mid-sized companies seeking loans, supplier credit, or contracts, and errors or improper practices in that industry can determine whether a small business owner is able to secure the financing needed to make payroll or fulfill an order — consequences that are just as concrete as those facing an individual consumer denied a mortgage, even if they draw less mainstream attention.
What small business owners can do to monitor their own file
Business owners are generally able to request and review their own company's business credit report directly from Dun & Bradstreet and similar reporting agencies, a step many small business owners do not think to take until a lender or supplier unexpectedly declines credit and cites the report as a factor.REVIEWED Periodically checking that file, much as an individual consumer might check a personal credit report, gives a business owner the opportunity to catch and dispute inaccuracies before they affect an important financing decision, rather than learning about a problem only after it has already cost the business an opportunity.
Sources behind this report
Have documents relevant to this story? Reach us through our tips channel.