Boosted:

Up until late December 2022 hackers were using a flaw on Experian's site to get people's entire credit reports using only their name, SSN, address, and birthday (Brian Krebs/Krebs on Security)