my name, my social security number, my date of birth, my home address. Everything accurate except one detail: the phone number on the account was not mine.
“This number received forty-seven authentication texts over the past six weeks,” James said. “Every purchase notification, every security alert went here. You never received a single one.”