Don't give away historic details about yourself
How often do websites just trust a security question for verification? I thought they usually ask it along with something else like along with a password reset email.