Identity theft has saddled thousands of children with debt, sometimes for years before they ever discover their personal information has been stolen, according to a study.
Within a database of 42,232 US children that was compiled by an identity-protection business, the Social Security numbers of 4,311 - that's 10.2 percent - were being used by someone else, according to Child Identity Theft, a report by Richard Power, a distinguished fellow at Carnegie Mellon Cylab.
In one case, a 17-year-old girl's Social Security number was used by eight different people to amass $725,000 (about £450,000) in debt. In another case, a 14-year-old boy had a 10-year-old credit history that included a mortgage on a $605,000 house, according to information supplied to Power by the identity-protection firm All Clear ID.
The study analysed the types of documents on which the Social Security numbers appeared, and it found that 70 percent were loan or credit card applications, 18 percent utility bills, 5 percent property assessments, deeds, mortgages and foreclosures, 4 percent driver's licences and 2 percent vehicle registrations.
Children more vulnerable to ID theft than adults
While 1 in 10 children in the database had their identities stolen, only 0.2 percent of the adults fell victim in the same way, Power says, and that stark contrast raises questions. "Are child Social Security numbers a hot commodity?" Power writes. "Are cybercriminals and other fraudsters seeking them out? Are child IDs preferable for fraudsters?"
The answer is that he doesn't know, and can't know until there is a study that is designed to compile results that can be extrapolated to the general population. Power says he and others at Carnegie Mellon University are considering such a study, but none is planned yet.
Meanwhile, it doesn't make a lot of difference what percentage of children's IDs are stolen, Power says. If you're the one it happens to, it's a nightmare, and most people don't even consider it as a possibility. "The other dimension is to raise awareness of this as an issue," he says.
In some cases parents with bad credit ratings use their children's Social Security numbers to open accounts with utility companies so they can get water and electricity without intending to harm the children's credit, Holland says. In other cases, criminals use the number to profit. Some are used by people in the country illegally who are trying to establish credit, and buy houses and cars.
The database used for the study was all the people under 18 that were listed in All Clear ID's 800,000-plus database of people whose personally identifiable information had been compromised. The firm is hired by businesses that suffer data breaches and want to extend some protection to those who could become victims, says Bo Holland, All Clear ID's CEO.
In most cases, identities endangered by data breaches do not fall under systematic attack, Holland says. The identities are compromised, but don't appear to be taken by someone who then actively tries to capitalise on them. Names that fell under targeted attacks were dropped from the database used for the study, he says.
Read more about wide area networks in Network World's Wide Area Network section.