The PIN for my Verizon account. I don't have a PIN on my phone, it's a fingerprint reader with a backup "pattern swipe" thing. I had no idea "port fraud" was a thing until yesterday.
Pretty much this, per USAA. Even though it's coming from a totally different state, a different MAC address and an entirely different kind of phone apparently that doesn't trigger any issues that make you need to speak to a real person, know your existing phone password, PIN, email address associated with the account, etc. etc. Now that I've been compromised I set up a higher level of authentication. USAA will eat the $1k their shitty security let get transferred out, and luckily I'm not in the situation were being down a grand for a few days affects me. I suspect many others would not have that luxury. I'm strongly considering moving at least my savings account to a local credit union. Changing my checking account would be a giant PITA, though.