Reporting from San Francisco — Credit reporting firms go to great lengths to convince the public that the data they collect won’t fall into the wrong hands. But what happens when they sell that data ...