Re:Experian Site Can Give Anyone Your Credit Freeze PIN
by the_evacuator on Thursday September 21, 2017 @03:43PM
(#15306711)
Considering that address and date of birth strongly predict most of the digits of the SSN, this is pretty bad. Consider further than even name can predict SSN (people named Stein more likely to have been born at the Jewish hospital, and SSNs are sharded by hospital).
SSN is not a secret. End of story.
"The first hurdle for instantly revealing anyone’s freeze PIN is to provide the person’s name, address, date of birth and Social Security number (all data that has been jeopardized in breaches 100 times over — including in the recent Equifax breach — and that is broadly for sale in the cybercrime underground).
After that, one just needs to input an email address to receive the PIN and swear that the information is true and belongs to the submitter. I’m certain this warning would deter all but the bravest of identity thieves!"