They did. Probably broke contract law (contract needn’t be a signed piece of paper saying “contract” at the top), and depending on the region, multiple consumer protection laws.

It isn’t criminal, but it is illegal mostly everywhere.