This is only tangentially related to a debit card as it happened when I called to cancel my chase continental debit, but in order to verify my identity, they pulled questions about my father and grandfather from "public records." I was (and still am) outraged. If they want to ask questions about me or make me fill out security questions at the start of the account process, that's fine. But don't start data mining and pulling information "from public records" which may have nothing to do with the account holder.
Plan to take this up the chain to see where it goes, but it's just a terrible policy.
