One tip to avoid being a victim is to never answer those online security questions with a real answer because they can be easily figured out (I usually answer with a password that I don't even bother to remember).