That is one defense for having an open system, but that only affects services who use these systems. The article doesn't mention if CashApp actually used her social to check credit, or just took the attackers' word by checking if the SS was valid and provided credit.

The other problem is that there isn't just one credit system, there are 3 major ones for general consumer credit, and other specialty ones (Innovis, etc; I had a list somewhere but can't seem to find it; AI might be a friend here).

▲

trollbridge 13 hours ago | parent [-]

It would be a significant improvement if full names with middle name and maiden name/name changes (if any), date of birth, and SSN were published:

Because then nobody could keep using them like they're a password, and would have to find actually secure ways of identifying people.

▲

bluGill 13 hours ago | parent [-]

Only SSN is not public information. They are not published, but the records are public if you go to the right place in person and ask the right questions. (sometimes you have a "need to know" before they will tell you, but it isn't hard to find one)

Even SSN is not private - you need to share it with enough people that it is safe to assume bad people have it.

Connecting an ID to a individual person is very hard. It is even harder when that person is not physically there.

	▲	trollbridge 13 hours ago \| parent [-]
		One of the more irritating forms of "ID" now is asking people to upload a driver licence photo, passport photo, or take a selfie of themselves.