Sounds very illegal also

Isn't it illegal to keep the CCV of the card on file? If that company was following legal and/or common sense procedures that would never have happened.

As for the trouble to the customers near their credit limit, well I believe that most can claim that this transaction was not authorized by themselves and thus avoid any subsequent problems.