Unverified50% confidencePredictionExact time
Once a phone number becomes a common linking point for multiple accounts, it becomes a single point of failure: an attacker only needs to control this one identifier to potentially take over all linked accounts through the "forgot password" process.
1
Sources
50%
Confidence
Long-term
Relevance
10/14/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe exposure of username-to-email address mappings can be used for cross-platform credential stuffing attacks, particularly against users who reuse the same password.72% similarUnverifiedAttackers can bypass two-factor authentication by stealing session cookies to directly impersonate a user's identity.70% similarUnverifiedDesensitization does not mean complete deletion; common practices include replacing phone numbers with the format 138****5678 and replacing the middle section of ID card numbers with asterisks, preserving readability while avoiding privacy exposure.70% similarUnverifiedEven with a clean architecture, account sharing itself may still trigger the official multi-device or abnormal login detection.70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1031843API
curl https://kongchang.com/api/v1/knowledge/claims/1031843MCP
get_claim(id=1031843)