It’s Still Easy for Anyone to Become You at Experian

KrebsOnSecurity reports that Experian's account registration and recovery processes can be abused to re-create and take over existing consumer credit accounts using readily available personal data, because the service does not reliably verify or notify the original account email/phone. Multiple readers reproduced the issue, and the article ties this to prior Experian security failures and breaches, highlighting ongoing risk of identity theft and credit fraud for millions of consumers.