Not good enough.
I want, at least, the name of the “third party vendor” ... and the names of the individual(s) who made the initial decision.
These people need to be called out, publicly, and utterly humiliated for their actions. That’s the ONLY way the next person who gets this sort of notion in their head is going to be deterred.