This is were security meets the real world. The number is not secret but people have been taught to keep it confidential. And when you know the last 4 digits social engineering har become a lot easier.
On positive side maybe now there is no reason to use it for authentication anymore. When it was always unsuitable for that reason.
On positive side maybe now there is no reason to use it for authentication anymore. When it was always unsuitable for that reason.