I usually put a leap year date since it only exists every 4 years.

But yea i do agree. Name, Dob, email address is enough for a fraud to work on and cross reference elsewhere, youll be surprised. If they know someone or have access to a nationwide database like a telecom company or credit bureau, then your screwed since name and dob is enough to identify a person. Mainly wealthy people get targeted though.