After Equifax's massive data breach – social security number, date of birth, and address from 143 million Americans stolen by cyber criminals – the question is: Can a financial institution be liable for using wrong Equifax data? One would expect that this Equifax event will result in an increase in ID theft. Banks trust credit scores provided by Equifax and other agencies. Indeed, they rely mostly on these numbers to offer or decline a loan. What if they offer a loan to a (fake) army colonel that is not even a US citizen, that is not on any payroll, has a phone number different from mine, and lives in a different state, but just happens to have the same social security number as me, as a result of ID theft and the bank's reliance on credit scores attached to a social security number. In the Equifax data breach, even secrete questions and answers (name of your first pet and so on) used by customers to recover account access,has been compromised.