"open banking" is supposed to only be with customer consent. But that's a politician's promise.
It is common practice for bank details to be shared with the credit reference agencies. It's also common practice for the credit reference agencies to run data supply businesses. There is not supposed to be any overlap between the two.