I suppose "the company be dissolved, its records thoroughly purged, and its ability to legally operate revoked" is a bit too much... though it shouldn't be.
How could the result have been any different or better? I don't see where anyone's claiming the government was unhappy with the final result. Rotten firms like this need to die.
The thing is that when the reasonable solution is "Stop the company doing its core competency" you need to realise that almost everything else the company does is going to be "exploit whatever it has left". So forcibly shutting down the company is far more reasonable than just stopping it from collecting credit information.