Save Your Social Security Number

Source: YourSecurityResource.com
Date: February 2010
By Kim Boatman
Link to Complete Article

Listing your date of birth and your hometown on social networking sites such as Facebook doesn’t seem like such a big deal.

After all, who doesn’t like being showered with birthday greetings from well-wishers? And listing your hometown makes it easier for old pals to reconnect. However, revealing these personal details could place your Social Security number -- and thus your identity -- at risk.

In a recently released study, Carnegie Mellon University researchers found that identity thieves might be able to accurately guess your Social Security number simply by learning your place and date of birth. In the trial, researchers discovered it is relatively easy to predict Social Security numbers for people born after 1988 -- when the Social Security Administration began pushing for infants to obtain numbers soon after birth. Researchers identified all nine digits for 8.5 percent of people in this category, using fewer than 1,000 attempts for each number.

Feeling a bit more secure because you were born in 1988 or before? Don’t get too comfortable. Carnegie Mellon researchers also were able to predict the first five digits of Social Security numbers for 7 percent of people born between 1973 and 1988.

Why your number might be vulnerable

The Social Security Administration relies on predictable geographical and statistical patterns in distributing numbers, making it easier for potential identity thieves to narrow down the range of numbers they’re guessing. As a consequence, if an identity thief knows that a certain series of numbers was assigned in your hometown or state during a certain time period, he or she doesn’t have to work all that hard to find your number.

Your number is at greater risk if you’re from a smaller state. For instance, in 10 or fewer attempts, researchers predicted one in 20 social security numbers issued in Delaware in 1996.

What you can do

Take a two-fold approach in protecting yourself, say the experts. First, safeguard aspects of your identity, such as your name and birth date. Next, be particularly cautious about where and how you reveal your Social Security number.

* Don’t use your Social Security number as ID. Resist efforts from companies that use your Social Security number or segments of your number as ID, says Dave Chronister, a certified ethical hacker and co-founder of Parameter Security in St. Louis, Mo. “You’re giving the key to your identity to someone else,’’ he says. “Once your Social Security number is out there, it’s out there for good.” There’s no reason to reveal your number on an employment application. A reputable employer will need that information only after you are hired. Never use even a partial number as identification. Identity thieves might be able to piece together the remainder of your number.

* Don’t input your number in your computer. Your number is so at risk that Chronister advises against even typing the nine digits into your computer. Too often, home computers are insecure. Shore up your defenses by installing strong antivirus, antimalware protection, running regular updates and obtaining any security patches. If you simply must input your number, run your security software before and after doing so.

As you share personal information online, don’t forget Chronister, who uses hacking techniques to help companies and government agencies understand the weaknesses in their systems.

“Social networking is a treasure trove for me,’’ he says. “It is scary how much information is out there, and how people are willing to put it out there without any reservation,” says Chronister “If some stranger walked up to you and said, ‘What’s your birthday? Where did you go to school? Where were you born?’ you would question that.”