Only you can decide if the action was based on ignorance or malice, but the bar is really low for permissible purpose (as defined by the Fair Credit Reporting Act) for a business to access your credit file.
Also, credit inquiries are virtually meaningless, and inquiries of the same type (in this case, auto financing) within a reasonable amount of time are scored as one by the FICO algorithms anyway.