Blog

Social Security Number Code Cracked

By Adrian Lane

An interesting news item on how social security numbers can be guessed with surprising accuracy made this morning’s paper. Researchers say they can determine much of someone’s social security number from birth date and location. Hopefully this will shine yet another spotlight on our over-reliance on social security numbers as a method of identification. From the San Jose Mercury news:

For people born after 1988 – when the government began issuing numbers at birth – the researchers were able to identify, in a single attempt, the first five Social Security digits for 44 percent of individuals. And they got all nine digits for 8.5 percent of those people in fewer than 1,000 attempts.

The predictability of the numbers increases the risk of identity theft, which cost Americans almost $50 billion in 2007 alone, Acquisti said.

That is fairly accurate, all things considered. When researchers Alessandro Acquisti and Ralph Gross make their research public, just as with most efforts of this type, we will see the research community at large make improvements in the methodology and accuracy of results. And in the long run, who says that the ‘guesser’ only gets one try?

What made me crack up in this news report was the Social Security Administration’s Mark Lassiter’s response that “… there is no foolproof method for predicting a person’s Social Security number,” and his statement that “The public should not be alarmed …”. Identity thieves and criminals don’t need 100% accuracy; a few million legitimate numbers ought to be sufficient.

No Related Posts
Comments

This has been known for a long time, I noticed this is becoming a big deal on the Internet today.  There is still a 1 in 1,000 chance to be right except for a few individual states.  The SS# system was never meant to be used for credit reports and as much as it has been.  There should be a better system in place but as for right now there really isn’t.  I believe just walking around an airport you can gather all the identities you want, since passports now emit name, birth date, and picture via RFID.

By Christopher


If you like to leave comments, and aren’t a spammer, register for the site and email us at info@securosis.com and we’ll turn off moderation for your account.