That should have never succeed because the request and the requestor's identity should be confirmed by using other data known and trusted by both parties, and p

That should have never succeed because the request and the requestor's identity should be confirmed by using other data known and trusted by both parties, and possibly by requiring confirmation by someone up your management chain to boot.