Computer criminals reset the passwords and stole W-2 tax information from customer employees of an Equifax subsidiary over the past year. The company used knowledge-based authentication (KBA) questions in the form of personal questions to verify employees. Attackers can easily guess the answers with some social engineering or an online identity theft service that sometimes already contains peoples responses. The amount of time it would take for a computer to crack any four-digit numeric combination ranges from instantly to two nanoseconds, i.e. two billionths of a second.”]