The security systems around our financial sector, and the simple fact you can set up a CC account with just their name, SSN, DOB, and mother's maiden name are a disgrace. Using a person's SSN as a password is brain-dead stupid. But it is how the system is set up.