Companies that communicate with their customers via SMS could leave them open to ID theft.