It's not just security lapses that need patching in the U.S. credit reporting system, experts told CNBC.