Not sure if this has been posted, I couldn't find any mention of it so far but considering the implications I wanted to share as it doesn't sound too great.
Apparently if someone has your information to create an Experian account they can do so even if you've already made one in the past, essentially overwriting your account with a choice of their email and password, and then they have access to modify things like whether or not your Experian credit is frozen.
The researchers attempted to replicate the same thing at TransUnion and Equifax but failed due to existing account messages so it seems like its an Experian specific issue at least.
https://krebsonsecurity.com/2022/07/experian-you-have-some-explaining-to-do/
What's concerning is that this is a basic failure of website/account security on Experian's part. This isn't a sophisticated attack by any stretch. Nevermind hackers, even jilted lovers or your problem cousin with questionable morals could easily accomplish this.
Wow, that's insane . . . hope that gets resolved asap!!! 
As someone with a cybersecurity background (even though cybersecurity is not my career path at this point), that is a complete and utter failure in 2022. Good... grief!
Between this and the Comenity outage ("system upgrade" with apparently no rollback plan), I'm literally floored at the compentency of the security, website, and general IT admins of these financial institutions.
