[cure]

> It's possible that your situation being so simple is exactly what makes it hard for them to be confident that the requestor is you.

You know, in theory this sounds reasonable. However:

- these organizations are grossly incompetent (is there anyone left in the US who has not had their data leaked by a credit bureau?)

- the incentives are very badly misaligned (it is our data, but we are not their customers, other corporations are, and they only provide this service because the law requires it)

I'm going to hazard a guess that it's just really crappy software that's causing this.