Payroll Company B. is a payroll service that allows a third party to withdraw funds from your bank account and send them to others. As of about three weeks ago, none of the major online payroll companies offered this feature. If you were to forget the Web front end, call the company’s toll-free support number, and tell the company you need to make an account change, the entire authentication regime falls apart with these dreaded words: “For security purposes, please tell me your full name and the last four digits of your Social Security number””]
Source: https://www.darkreading.com/attacks-breaches/zero-factor-authentication-owning-our-data