Turned this week's rant about ongoing sloppy security at Experian into a blog post. Thanks to everyone here who helped with the research.
It's Still Easy for Anyone to Become You at Experian
In the summer of 2022, KrebsOnSecurity documented the plight of several readers who had their accounts at big-three consumer credit reporting bureau Experian hijacked after identity thieves simply re-registered the accounts using a different email address. Sixteen months later, Experian clearly has not addressed this gaping lack of security. I know that because my account at Experian was recently hijacked, and the only way I could recover access was by recreating the account.
https://krebsonsecurity.com/2023/11/its-still-easy-for-anyone-to-become-you-at-experian/