The CFPB ordered Chase Bank USA, N.A., and JPMorgan Chase Bank, N.A., to refund an estimated $309 million to more than 2.1 million customers for allegedly enrolling them in credit card “add-on” products without their authorization and for charging them for credit monitoring services that they did not receive, the agency announced late last week. The restitution has already taken place, and most affected cardholders should have received their refunds by Nov. 30, 2012. The bureau also ordered Chase to make a $20 million penalty...