But that CPA’s information breach didn’t account for all the dubious loans ProPublica discover over the nation