The Consumer Financial Protection Bureau fined U.S. Bank and ordered the institution to improve its oversight of third-party vendors after the agency determined that some consumers were unfairly charged for “add-on” identity protection and credit monitoring services they did not receive. The bureau’s order requires the bank to review its third-party risk management and responsible banking programs to ensure they meet certain minimum standards.