I had some raised eyebrows when requesting a 90 day fraud alert a few months ago. One of the questions asked me to verify my sisters married name who lives out of state. And by the way she only lived in that state for a short period of time. How the heck do they know that?
all that one has to do is look at one of those people finders sites that advertise on search engines. They aggregate public information.