Scientists guess nearly one in ten Social Security numbers

If you have certain information available in public records, combined with knowing a birthday, guessing a person's Social Security number is fairly easy, suggest computer scientists.

In a report in the Proceedings of the National Academy of Sciences journal, Alessandro Acquisti and Ralph Gross of Carnegie Mellon University in Pittsburgh combed Social Security Administration death records to detect statistical patterns in how numbers are assigned. Combining that data with birthday and birthplace information available from marketers, the researchers guessed 8.5% of test individuals' Social Security Numbers assigned from 1988 to 2003.

A criminal could likely compile 4,000 genuine numbers based on the statistical pattern alone, says the study. Social Security Numbers "were designed as identifiers at a time when personal computers and identity theft were unthinkable," concludes the study.

The study authors suggest that the federal government assign numbers randomly, instead of tying them to birthplace, and they suggest that lawmakers rethink using the numbers as identifiers.

By Dan Vergano

Posted at 06:28 PM/ET, July 06, 2009

http://blogs.usatoday.com/sciencefair/2 ... mbers.html