https://obliviousinvestor.com/what-does-a-thief-need-to-access-your-financial-accounts-its-likely-less-than-you-think/
"
If that sounds surprising to you, take a look at the password-reset forms for any number of financial institutions. (Here's Vanguard's for instance. Here's Fidelity's.) Take a careful look at the information they ask for. For many financial institutions, the form requires:
Name,
Date of birth,
Social Security number (or last 4 digits of Social Security number), and
Zip-code.
After you enter that info, they send you a 6-digit code. And after entering that code, they let you reset your username and/or password, or perhaps they display your username on the screen in plain text and allow you to pick a new password..."
