Fake Ownership to access Private Data

[yashmurty]

If a malicious user signs in using a new social account, he can link it with any roll number that he provides, and can access the personal information, entered for that roll number, by the genuine user.