Problem: A publisher found out that one customer's email address does not match the email address on file recently; than the publisher requires the customer to confirm that it was valid. A new contract had been set up at yahoo or hotmail rather than standard email, all the other information is correct.
Registration process: complete an online request from including name, contact details and so on. After, verified, the log in id and password would be sent back to the customer by email.
1. Is there a victim in this situation or has anyone got harm?
2. Is the registration process needed to be improve? What changes you would like to make?
3. Is it a case of identity theft, explain why
4. If the person creates the account is identified, what are some penalty you can apply?