Not sure if it's from this data breach, but I just had a credit card I don't use, hijacked.

A no-good scum-bum (to use nicer language) in Groton, CT somehow got onto my account, changed the email to his, upped the credit limit, added himself as an authorized user, and sent himself two cards. One for him and one for who I assume is his wife or sister.

I only found out about it because the app was telling me the credit limit increase I requested was approved, and the cards I ordered were sent out.

If they got my SF-86/EPSQ, they pretty much have any and all information they need to reset any password if they call and answer most likely "reset password and I can't get into my email" questions.

Govt' skill strikes again.. And it's not the idiots in charge dealing with it.

More likely they got the CC info from somewhere else.

The security questions are getting better though, you just have to be careful about which ones you use...

Mom's maiden name is bad. Any question involving a location is bad if the answer is your current hometown, your original hometown, or where you went to college.

Better are things that are unlikely to appear online or in any public record, although social media can be a problem depending on how much you use it, how far back it goes, and how open it is.

I'm old enough that none of my childhood info is online at all.