That is strange, I'm not sure. If you or a client are competing and getting bumped off the list though, it'd be really easy to take your place back. Their name is against guidelines (should just be 'Pop-a-lock') and as soon as you get their name edited to be in line with guidelines, they'll probably drop back to a 3-pack. As far as why they're there though, I noticed they've got incredible organic ranking as well. They're in the number one spot. Even without the name helping them, they'd probably still be in the 3-pack.
In general though, if you're working with locksmiths or interested in locksmiths, competitive spam reporting is something you need to be doing. here's a guide that Joy wrote to help you get started.
One packs used to happen A LOT a couple years ago. Blumenthal and I fought that battle for months. Big 7 packs like San Diego Plumbers and Dallas Dentist were being wiped out by one-boxes.
Back then it was especially bad because most of the one-boxes were old spam listings or old closed businesses - so dead site, dead phone. Knocked all the legit biz out of the pack and the one result was not even valid to help consumers find what they were looking for.
Now it doesn't happen very often, but when it does it's usually because the domain and biz name are close enough to the query and it's a strong enough listing that Google thinks you generic KW search is really a search for that specific business.
But I agree with James. Get the name edited to real name and they'll likely lose the one-box and hopefully goes back to a 3 pack.
Not sure about that name tho. Their corp page biz name in title is Pop-A-Lock of Charlotte. Not sure how naming conventions work with that franchise.
But if you can determine "of Charlotte" is not part of the name, then I'd try to get name in Yelp corrected too if you can. They are #1 in Yelp and that sometimes carries enough clout to help get a one-box.
I'm not seeing a one-box using a tool that set my location to Charlotte. However, I just submitted an edit for their name because regardless if they're "Pop-A-Lock" or "Pop-A-Lock of Charlotte" they most definitely don't have the word "locksmith" in the name.
New advertising option:
A review of your product or service posted by a Sterling Sky employee. This will also be shared on the Sterling Sky & LSF Twitter accounts, our Facebook group, LinkedIn, and both newsletters.