July 7, 2009

Researchers Find that Social Security Numbers Can Be Guessed

Researchers working from the Social Security Number (SSN) Death Master File discovered that most if not all of the numbers of the SSN could be guessed. SSNs were never intended to be used to approve credit, obtain a drivers license, apply for jobs, or register to vote, but that is how they have been used. Because they are valuable to identity thieves--not restricting their use to their original purpose is costing consumers tens of millions of dollars annually. The first three numbers of the SSN are based on the geographic location of ones' birth. The next two numbers are known as the "group number" and can change very slowly--sometimes spanning years for a region. The last four numbers of the SSN are allotted sequentially. The Master Death File is a list of SSN numbers assigned to persons who are now deceased. If the date and area of birth is known--then locating someone in the Master Death File with the same date and area of birth can allow guessing of the SSNs of individuals. Many users of social networking media are sharing basic information such as date of birth and place of birth.

Researchers: Social Security Numbers Can Be Guessed, Brian Krebs, Washington Post, July 6, 2009