This is still unconfirmed but Brian Krebs is reporting that some people are gaining access Experian's credit freeze PINs without authorization.
https://twitter.com/briankrebs/status/1048247264152621061
(screenshot because link eventually goes to FB)
@0x56 f*.. 😣
@jordicusmaximus - yeah - Experian really needs to go away.
@VelvetDuchess @jordicusmaximus - but it *is* still unconfirmed - I just want people to be aware of this potential attack vector, maybe get in front of it, and test it for themselves.