Let's say someone has a hold of all the information Equifax had about me.
I'm trying to understand how some of the things people say could go wrong could actually happen:
They could supposedly open a credit card account in my name, right?
But that requires a home address. If they give a wrong address, it won't match the records. If they give the correct address, then the mail will come to me, not them.
I'm not sure if they could open a bank account in my name (banks also usually ask for a scanned copy of my ID electronically, or a physical copy in person), but in any case, the address problem is still the same as with credit cards.
They can't get a mortgage or anything big, because that requires a copy of my ID, among other things (e.g. documentation for collateral or whatever).
So how do these actually happen? Do companies just forget to check IDs or cross-check names against addresses? Or do thieves bypass these processes somehow?