[mouseanon]

To me the real story is how powerful the last four digits of your credit card are and how easily they're attained. Even more shocking is your privacy basically depends on the least secure online account you own.

Think of how easy it is to write a program like this:

  INPUT:  list of someone's online accounts,
          desired account access
  OUTPUT: step-by-step instructions of numbers to call and forms to fill out
          to obtain desired account access

All you would really need is a small database of the information required to reset your password and login for a bunch of popular accounts. Your script just has to connect the dots.