Thieves are stealing children's identities

By Tim Greene, Network World |  Security, cybercime, data breach Add a new comment

Identity theft has saddled thousands of children with debt, sometimes for years before they ever discover their personal information has been stolen, a study says.

Within a database of 42,232 children that was compiled by an identity-protection business, 4,311 -- 10.2% -- had someone else using their Social Security numbers, according to "Child Identity Theft," a report by Richard Power, a distinguished fellow at Carnegie Mellon Cylab.

MORE ON THE PROBLEM: FTC: ID theft again tops consumer complaints

In one case, a 17-year-old girl's Social Security number was used by eight different people to amass $725,000 in debt. In another case, a 14-year-old boy had a 10-year-old credit history that included a mortgage on a $605,000 house, according to information supplied to Power by the identity-protection firm All Clear ID.

The study analyzed the types of documents on which the Social Security numbers appeared, and it found that 70% were loan or credit card applications, 18% utility bills, 5% property assessments, deeds, mortgages and foreclosures, 4% driver's licenses and 2% vehicle registration.

While 1 in 10 children in the database had their identities stolen, only 0.2% of the adults fell victim in the same way, Power says, and that stark contrast raises questions. "Are child Social Security numbers a hot commodity?" Power writes. "Are cyber criminals and other fraudsters seeking them out? Are child IDs preferable for fraudsters?"

The answer is that he doesn't know, and can't know until there is a study that is designed to compile results that can be extrapolated to the general population. Power says he and others at Carnegie Mellon University are considering such a study, but none is planned yet.

Meanwhile, it doesn't make a lot of difference what percentage of children's IDs are stolen, Power says. If you're the one it happens to, it's a nightmare, and most people don't even consider it as a possibility. "The other dimension is to raise awareness of this as an issue," he says.

In some cases parents with bad credit ratings use their children's Social Security numbers to open accounts with utility companies so they can get water and electricity without intending to harm the children's credit, Holland says. In other cases, criminals use the number to profit. Some are used by people in the country illegally who are trying to establish credit, and buy houses and cars.

The database used for the study was all the people under 18 that were listed in All Clear ID's 800,000-plus database of people whose personally identifiable information had been compromised. The firm is hired by businesses that suffer data breaches and want to extend some protection to those who could become victims, says Bo Holland, All Clear ID's CEO.

In most cases, identities endangered by data breaches do not fall under systematic attack, Holland says. The identities are compromised, but don't appear to be taken by someone who then actively tries to capitalize on them. Names that fell under targeted attacks were dropped from the database used for the study, he says.

People worried that a child's Social Security number is being misused can check it out free at http://freechildscan.allclearid.com for a limited time.

Read more about wide area network in Network World's Wide Area Network section.


Originally published on Network World |  Click here to read the original story.

ITworld LIVE

SecurityWhite Papers & Webcasts

Webcast On Demand

Seven Deadly Sins of Cloud Security (Video)

As cloud computing gains popularity, too few people are aware of the security threats that are emerging. In this short video, experts from HP discuss the latest cloud security threats and explain measures to help overcome them. Hear about the seven deadly sins of cloud security and learn how to avoid becoming a victim of poor security in your cloud environment.Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

Sponsor: HP & Intel

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper

Database Activity Monitoring Is Evolving

Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.

White Paper

Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios

Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.

Webcast On Demand

Distributed Database Security with Real-time Monitoring

View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with a holistic approach to data security and compliance.

Sponsor: IBM

See more White Papers | Webcasts

Ask a question

Ask a Question