Identity theft
Whenever I seek a password from my various bank accounts, I get an email admonishing me to confirm that it was *I* who sought the information. Kim fell down on the job when she didn't reply to the emails sent by her bank or other financial branch acknowledging that she requested the information. The hacker could have been shut down completely if she had responded to the bank queries to assure that it was she who requested the information. That said, I have changed my challenge information to make sure that a hacker could not figure out what my password response was. Even my wife doesn't have a clue what the answer is. Nowhere on any site is the answer to my challenge question. Thanks for the insight to make my information less accessible to a knowledgeable hacker.