The U.S. Government Accountability Office says some federal agencies rely on knowledge-based authentication to prevent fraud and abuse. This method is no longer trustworthy because so much personal information that’s been breached is readily available to fraudsters, the report says. The report suggests that government agencies use other forms of identification that include, for example, asking for submission of a picture of a driver’s license via a cellphone. The Equifax breach exposed data on 148 million Americans, which could enable fraudsters to impersonate individuals seeking government assistance because they would have access to personal data.”]
Source: https://www.govinfosecurity.com/gao-after-equifax-breach-kba-no-longer-effective-a-12641