Originally Posted by
ps9a
They said that their staff is being used in other departments now... not sure if any are furloughed in addition. But seems crazy to me... they could have stopped this pretty cleanly (in my case) if somebody in the identity department were there past 6pm EDT. Maybe they'll have somebody waiting when $30k of gift cards arrive at an address in Illinois-- they had changed both the physical address on my account and the email address. Incidentally, the changes made to my account were done with an agent, over the phone. I have no idea how this is possible, but whoever it was must have been able to answer some security questions.
Are your social media accounts public? That's often enough to provide answers to some of the most common security questions. If you've filled out one of those stupid "Bored in quarantine, tell us about yourself" surveys, they can answer all your security questions. Those were designed specifically to social engineer that kind of info out of people.