“For now, Rishi has decided to pay Experian $25.99 a month to more closely monitor his account for suspicious activity.”
Anyone with your Social Security number and birth date can re-create your Experian account and point it at a new email address. Experian doesn’t verify the change, and doesn’t offer multi-factor login to everyone. Equifax and TransUnion both blocked the trick. Experian calls it isolated fraud, then charges victims $25.99 a month to watch for the next one.