A coincidental similarity between two users' log in and password information allowed a New York man to have access to a Florida woman's online American Express card account. According to the New York Times, American Express reports that the man would have needed "additional levels of authentication — meaning information only the true card member would have" to make changes to the account billing address or similar account information. However, with a two-factor authentication solution, the account would have been protected from even the initial hack because the man would not have received the 2nd factor password needed to access the account.