>Fing GOV
DB Cooper has found the same sophomoric security flaw with several major and regional financial institutions (brokers, banks, Equifax and other credit score companies). With Name+DOB+SSN plus a free Gmail account that looks like it belongs to the targeted person, it's possible to hijack -or at least manipulate- an account. It's one reason DB doesn't bank online.
<added>
>brokers, banks, Equifax
Also insurance companies