I would guess that the PII of close to 100% of anyone who has ever done business with any financial services or insurance company has been compromised. We have to get to a point where this information is just assumed to be public and not valid for identity purposes.