I am in the very same situation with a Credit Union in Ohio, I was one month late with a loan payment, they repoed the car and sold it to Auciton. One year and few months later, They empty my savings account 3 times without notifying me and said it was for the car loan. Is this legal?