Security Sense: How Do You Do Knowledge Based Authentication When All Knowledge is Public?

How do you authenticate people based on data attributes they know when that very information is continually popping up in data breaches? It's a hard problem with no easy answers.