1. A method for mitigating forgotten password attacks comprising: collecting public data associated with a user; analyzing inferences available from the public data; receiving an indication of a forgotten password communication for the user; identifying, using at least one computer processor, verification information associated with the forgotten password communication; determining a level of difficulty of inferring the verification information based on public information associated with the user; and calculating a level of risk associated with the verification information; wherein the public data associated with the user is collected and inferences are analyzed prior to receiving an indication of a forgotten password communication for the user.