Name+DOB+SSN=FAFSA Data Gold Mine

[rcjordan]

https://krebsonsecurity.com/2017/11/namedobssnfafsa-data-gold-mine/

[Mackin USA]

OMG > Fing GOV

[rcjordan]

>Fing GOV

DB Cooper has found the same sophomoric security flaw with several major and regional financial institutions (brokers, banks, Equifax and other credit score companies).  With Name+DOB+SSN plus a free Gmail account that looks like it belongs to the targeted person, it's possible to hijack -or at least manipulate- an account. It's one reason DB doesn't bank online.

<added>

>brokers, banks, Equifax

Also insurance companies

[Mackin USA]

DB was a WISE MAN

[gm66]

The OP link is 502 for me.

[rcjordan]

Still works here. They're blocking you.

[rcjordan]

>With Name+DOB+SSN

DB phoned in to say that he again had to use this ploy last week to manage a disabled person's health insurance. DB has full power-of-attorney for the person involved but the health insurance company wanted their own custom permissions form on file before discussing any billing details.  That would take too long and the problem would spiral out of control. BUT the online account had a CHAT feature, soooo.........  Bingo! Mission accomplished.