Why are we still using Social Security numbers as ID?

This post was originally published on this site
5 of the biggest data breaches ever

5 of the biggest data breaches ever

The Equifax breach compromised the personal data of as many as 143 million Americans. Among the data exposed: Social Security numbers.

Criminals can use your Social Security number to steal your identity. They can open bank accounts and credit cards or apply for a loan. Hackers can also get ahold of your tax refund or get medical treatment under your name.

In recent years, SSNs were exposed when fraudsters hacked the U.S. Postal Service, a hospital network and Anthem health insurance.

The data breaches beg the question: Why are we still using Social Security numbers to identify ourselves?

Social Security numbers were first issued in 1936 — “for the sole purpose” of tracking the earnings history of workers for benefits, according to the Social Security Administration.

Until 1972, the bottom of the card said: “FOR SOCIAL SECURITY PURPOSES — NOT FOR IDENTIFICATION.”

But Social Security numbers have since become a key method of ID.

“It was the one unique piece of information that would identify every consumer individually,” Neal O’Farrell, executive director of the Identity Theft Council, told CNN Tech.

Related: The biggest data breaches ever

So if not Social Security numbers, what are the alternatives?

A national identification number is one idea that’s been floated. However, this would be a huge undertaking for the U.S. government — and that number could get hacked as well, according to experts.

“It doesn’t matter if it’s a new Social Security number or a new national identification system — whatever that identifier is, it’s still going to be the thing that attackers are going after,” said Russel Van Tuyl, managing consultant of security assessments at Sword & Shield Enterprise Security.

Biometric identifiers — such as fingerprints, iris scans, voice and facial recognition — are potential alternatives. The technology has become more mainstream in recent years: We regularly use our fingerprints to unlock our smartphones. Meanwhile, iris scans and facial recognition are also available on some phones, and many consumers talk to voice assistants like Alexa and Siri.

“Biometrics is much more viable than it was five to 10 years ago because of mobile,” said Justin Oberman, a former Transportation Security Administration executive and former VP of identity strategy at SureID.

“If everyone was using fingerprints, no one would care about Social Security numbers anymore … [But] all of this is going to take time,” he said.

Related: What to do if your identity is stolen

Some companies — and countries — are already using biometrics like voice for identification.

For example, the global bank HSBC launched a security technology called Voice ID last year. Customers who use banking services over the phone can register their voice with the company. The technology analyzes more than 100 behavioral and physical voice characteristics to identify and authenticate the customer. It’s available in English, Spanish, Cantonese and Mandarin.

Meanwhile, Australia’s Department of Human Services and Taxation Office allows people to create a “voiceprint” to identify themselves when they call. The U.K.’s tax and customs authority also introduced tech this year that recognizes a person’s voice over the phone.

Related: Equifax leaves Canadian and British victims in the dark

But a disadvantage of biometrics is that if this information is compromised, you can’t replace it.

“If someone hacks your account and takes your password or username, you can just get rid of it and get another one. You can’t do that with your finger or your eyeball,” Van Tuyl said.

And you can also get a new Social Security number — if you can prove you’re being harassed, being abused or in grave danger, or that someone stole your number and is using it.

Although you can’t replace your biometrics, sophisticated tech called “anti-spoofing” can detect whether someone is using them fraudulently, such as playing a computer simulation of your voice, according to Brett Beranek, director of strategy and go-to-market for biometrics and security at Nuance.

For its part, HSBC said its Voice ID technology is advanced enough to determine if someone is pretending to be you or playing a recording. It can also recognize your voice even if you are sick or have a sore throat.

As for whether we should get rid of the Social Security number as a form of ID, Beranek said: “The number can stay, but we shouldn’t rely on it to prove who you are. … You should just assume anybody could have that number.”

Be Sociable, Share!

Related Posts


MarketTamer is not an investment advisor and is not registered with the U.S. Securities and Exchange Commission or the Financial Industry Regulatory Authority. Further, owners, employees, agents or representatives of MarketTamer are not acting as investment advisors and might not be registered with the U.S. Securities and Exchange Commission or the Financial Industry Regulatory.

This company makes no representations or warranties concerning the products, practices or procedures of any company or entity mentioned or recommended in this email, and makes no representations or warranties concerning said company or entity’s compliance with applicable laws and regulations, including, but not limited to, regulations promulgated by the SEC or the CFTC. The sender of this email may receive a portion of the proceeds from the sale of any products or services offered by a company or entity mentioned or recommended in this email. The recipient of this email assumes responsibility for conducting its own due diligence on the aforementioned company or entity and assumes full responsibility, and releases the sender from liability, for any purchase or order made from any company or entity mentioned or recommended in this email.

The content on any of MarketTamer websites, products or communication is for educational purposes only. Nothing in its products, services, or communications shall be construed as a solicitation and/or recommendation to buy or sell a security. Trading stocks, options and other securities involves risk. The risk of loss in trading securities can be substantial. The risk involved with trading stocks, options and other securities is not suitable for all investors. Prior to buying or selling an option, an investor must evaluate his/her own personal financial situation and consider all relevant risk factors. See: Characteristics and Risks of Standardized Options. The www.MarketTamer.com educational training program and software services are provided to improve financial understanding.

The information presented in this site is not intended to be used as the sole basis of any investment decisions, nor should it be construed as advice designed to meet the investment needs of any particular investor. Nothing in our research constitutes legal, accounting or tax advice or individually tailored investment advice. Our research is prepared for general circulation and has been prepared without regard to the individual financial circumstances and objectives of persons who receive or obtain access to it. Our research is based on sources that we believe to be reliable. However, we do not make any representation or warranty, expressed or implied, as to the accuracy of our research, the completeness, or correctness or make any guarantee or other promise as to any results that may be obtained from using our research. To the maximum extent permitted by law, neither we, any of our affiliates, nor any other person, shall have any liability whatsoever to any person for any loss or expense, whether direct, indirect, consequential, incidental or otherwise, arising from or relating in any way to any use of or reliance on our research or the information contained therein. Some discussions contain forward looking statements which are based on current expectations and differences can be expected. All of our research, including the estimates, opinions and information contained therein, reflects our judgment as of the publication or other dissemination date of the research and is subject to change without notice. Further, we expressly disclaim any responsibility to update such research. Investing involves substantial risk. Past performance is not a guarantee of future results, and a loss of original capital may occur. No one receiving or accessing our research should make any investment decision without first consulting his or her own personal financial advisor and conducting his or her own research and due diligence, including carefully reviewing any applicable prospectuses, press releases, reports and other public filings of the issuer of any securities being considered. None of the information presented should be construed as an offer to sell or buy any particular security. As always, use your best judgment when investing.