Name, date of birth and contact details (phone and address) are often enough data for a fraudster to commit some serious damage. If I call up my phone company or bank that's probably going to cover the questions they ask me to prove identity. Someone transferring my phone can then get past any 2FA I hold.
At what point do we hold NAB liable for the potential damage they have caused?
At what point do we hold NAB liable for the potential damage they have caused?