They use a heck of a lot more than that. They use your name and DOB to run a backdoor credit pull and it turns out that is a pretty reliable indicator of what risk pool you belong in. There is also a "credit check" for insurance (You can get your report from LexisNexis) and they can see how many times you applied for other insurance products and how long you had them, which is another indicator.