As I understand it, a large number of KYC requirements were enacted with the Patriot Act following 9/11. You raise the interesting point that this breach undermines these KYC rules. In this interpretation, lax Equifax security could be seen to directly empower terrorists.