My boss is currently going through a divorce and his soon to be ex-wife is thinking of ways to get back at him. Her antics have gone from laughable to just plain scary but the latest event involves making changes to our company sprint account. She was not on the account and she did not know the company pin but she was still able to change a service (turn off incoming text messages) without authentication. It turns out anyone can make changes to your account as long as they are not financially impacting. This even includes reporting the phone as lost or stolen.