There is a chain of authentication between fake-sokoloff and the credit agency. Maybe fake-sokoloff has tricked the bank due to the bank's weak security. Now th

There is a chain of authentication between fake-sokoloff and the credit agency. Maybe fake-sokoloff has tricked the bank due to the bank's weak security. Now the bank asks the credit agency for information about sokoloff by providing whatever weak metrics it has obtained. Both the bank and the credit agency have failed due to accepting weak metrics.