This is what needs to change. Personal trivia can no longer serve as proof of identity. We need to make the personal data useless for identity thieves.