100%. Several years ago, our internet provider account was hacked. I received an email saying that the password had been changed, I remember thinking - what is someone going to do with that account, pay my bill? It didn’t have any financial info in it, as we don’t use auto pay.
I had forgotten that there was a phone number included with that account - an old land line that we no longer used. I had never canceled it because the bundle was cheaper. Whoever got into our account ported that number to another phone and called our bank. The number was a recognized number by the bank, so they authorized several transactions. The only reason I caught that was because I received a survey email from the bank about my customer service experience.
Thankfully, I was able to stop everything before any damage was done, but only because I was lucky. I was even able to get our phone number back because the thieves didn’t put any protection on it, so I found the service provider and had it ported back. Then I cancelled it.