Your story sounded vaguely familiar to me, so I just looked in my email archive, and it appears I did the same thing around the beginning of 2021, when Experian also automatically signed me up for "CreditWorks" after I disputed fraud with them[0]. They were sending almost-daily spam. ("Your Dark Web scan is complete!" "Congrats, your membership's been upgraded!" "Important Information about your credit score!")
I wrote to the FTC instead of the CFPB, and got a form letter back for my efforts. Mail from *@*.experian.com is still blackholed, so I guess this is a good reminder that rule is there, if I'm ever required to deal with those assholes again.
[0] Supposed past-due electric utility account in a state in which I've never set foot, let alone owned or rented property. Interestingly, this only showed on my Experian report, but not TransUnion or Equifax, so I'm pretty sure it was a reporting mistake as opposed to intentional identity theft.