It wasn't easy to clear up, either. I'm fortunate that a close friend worked (at the time) for the SS administration, and was able to do basically all of the leg-work for me: I just had to sign a few forms he sent me. Someone not equally connected would have had a much harder time.
I'm also painfully aware that effectively every scrap of everyone's personal data has been repeatedly leaked online. I doubt that any amount of care has much to do with whether or not I'll be targeted at some point in the future.
she said the next few years he got many tax returns, apparently several people using his legitimate ssn.
I used to work a job years ago with lots of people who snuck in here. In order to get the job they needed to provide a social. Not having any idea wtf a social security number was, just that they needed one, it was a relief when someone they lived with or met on the street informed them that xyz at location abc will sell you one for $100.
That's one spot where the identity theft rubber meets the road. And practically everyone's social has been leaked by now.
I don't think that they actually do in practice. Last time I opened an account with Comcast they required your social security number. Same with an AT&T cell plan.
As many as 1 in 7 SSNs may have been accidentally used by more than one person. [1]
Unlike Australia's TFN or the UK's VAT, SSN has no self-check, making it rather easy to just... Generate one that works.
And all an API check of the number will tell you, is what an attacker would already have: DOB and Place of Birth.
[0] https://pnas.org/doi/full/10.1073/pnas.0904891106
[1] https://www.nbcnews.com/technolog/odds-someone-else-has-your...
Strictly speaking they require /a/ Social Security Number, not necessarily /your/ SSN.
When I signed up for my most recent cellular service, I hesitated at giving my information to the guy in the store. I told him that since it was a pre-paid account I wasn't asking for credit, so there's no need for him to have my information.
He was OK with that, and pulled out an ID card the store keeps in a drawer for just such occasions.
Salespeople have a sales quota, not an enforce-the-rules quota.
This person could have been an illegal, but there is a non-zero chance you just both had the same one. It does happen, or at least did.
Sidenote: I don't bear any ill will towards whoever used my SSN. It's not like I was targeted, or even that any harm to me was intended. This was a "hack" of a dysfunctional immigration and employment system, in a way that's totally obvious and easy to anticipate. My ire is reserved for those in positions of responsibility who maintain a regime that is manifestly not fit for purpose.