January 9, 2023 Identity thieves bypassed Experian security with simple URL change — it's patched now, but unclear how long the dead-simple security lapse existed (via) #