Capital One’s breach was inevitable, because we did nothing after Equifax
After my identity was stolen, likely from Equifax, I closed my Capital One account and advised everyone I knew to do the same. I was shocked to discover how easy it was to get past the forgot password screen: you are immediately logged in with full privilege if you answer all the easy to guess PII questions! No email notification. No text. No 2 factor. Full logged in access!<p>Lesson learned: always check the forgot password/trouble logging in feature on sites where security matters.