Very few companies match sensitive info like cc numbers, account numbers etc. My guess is that it would allow an attacker to get account numbers belonging to e

Very few companies match sensitive info like cc numbers, account numbers etc. My guess is that it would allow an attacker to get account numbers belonging to existing customers??