Once they are in......all it takes is a name and location to start building a fake you. Next thing you know hacker-dude has a credit card in your name.