That’s all it took the attacker. Name. Email. Address. That’s all it takes to steal someone’s identity to start opening legitimate U.S. bank accounts in someone’s name. 

That's terrifying, honestly.

Thanks for the write-up, hope all works out well