The Hydra Group, an online payday lender, was violating multiple laws in a cash-grab scheme that often targeted consumers who didn’t apply for a loan with them, the Consumer Financial Protection Bureau (CFPB) alleges in a lawsuit against the company. The CFPB says the Hydra Group bought consumers’ personal data, including bank account numbers, from online lead generators so it could “illegally deposit payday loans and withdraw fees without consent,” according to the press release. The company not only did not disclose the loan terms up front, but in some cases used “falsified loan documents to claim that the consumers had agreed to the phony online loans,” according to the release. A U.S. District court judge has temporarily halted the Hydra Group’s operations and has frozen its assets at the request of the CFPB. For more, read the full release.