It is possible to accuratelly guess a person's social security number


You can accuratelly guess a persons SSN

The article is right it is fairly easy to guess the range of numbers a person could have for a social security number if you know the date the card was issued and the state it was issued in.

Area Number AAA-nn-nnnn

The first 3 numbers which is called the "Area Number" is based on the state the social security number was issued in.

SSNState SSNState or Territory
001-003New Hampshire449-467, 627-645Texas
035-039Rhode Island501-502North Dakota
040-049Connecticut503-504South Dakota
050-134New York505-508Nebraska
135-158New Jersey509-515Kansas
223-231, 691-699Virginia521-524, 650-653Colorado
232-236West Virginia525, 585, 648-649New Mexico
232, 237-246, 681-690North Carolina526-527, 600-601, 764-765Arizona
247-251, 654-658South Carolina528-529, 646-647Utah
252-260, 667-675Georgia530, 680Nevada
261-267, 589-595,
303-317Indiana545-573, 602-626California
362-386Michigan575-576, 750-751Hawaii
387-399Wisconsin577-579District of Columbia
400-407Kentucky580Virgin Islands
408-415, 756-763Tennessee580-584, 596-599Puerto Rico
425-428, 587-588,
Mississippi586American Samoa
429-432, 676-679Arkansas586Philippine Islands
433-439, 659-665Louisiana700-728Railroad Board*
440-448Oklahoma729-733Enumeration at Entry

  1. Any number beginning with "000" will never be a valid SSN.
  2. To date, no area number has been issued after "772".
  3. If the same area number appears more than once, it is because certain numbers were transferred from one State to another or that the area number was divided for use amongst certain geographical locations.
  4. * = 700-728 issuance of these numbers to railroad employees was discontinued July 1, 1963.

Group Number nnn-GG-nnnn

The second 2 numbers which is called the "Group Number" is based on the date the card was issued.

Group numbers issued first consist of the ODD numbers from 01 through 09 and then EVEN numbers from 10 through 98, within each area number allocated to a State. After all numbers in group 98 of a particular area have been issued, the EVEN Groups 02 through 08 are used, followed by ODD Groups 11 through 99.

So the Group Numbers are issued in this order:

01, 03, 05, 07, 09,
10, 12, 14, ... ... ... 94, 96, 98,
02, 04, 06, 08,
11, 13, 15, ... ... ...95, 97, 99

The government publishes the dates of use of each of these 2 digit number for each Area Number.

See this URL to discover the date a Social Security card was issued

Serial Number nnn-nn-SSSS

The last 4 numbers which is called the "Serial Number" is also based on the date the date the card was issued. It goes from 0001 to 9999 sequentially



Study: Social Security number code cracked

by Randolph E. Schmid - Jul. 7, 2009 12:00 AM

Associated Press

WASHINGTON - For all the concern about identity theft, researchers say there's a surprisingly easy way for the technology-savvy to figure out the precious nine digits of Americans' Social Security numbers.

"It's good that we found it before the bad guys," Alessandro Acquisti of Carnegie-Mellon University in Pittsburgh said of the method for predicting the numbers.

Acquisti and Ralph Gross report in Tuesday's edition of Proceedings of the National Academy of Sciences that they were able to make the predictions using data available in public records as well as information such as birthdates cheerfully provided on social networks such as Facebook.

For people born after 1988 - when the government began issuing numbers at birth - the researchers were able to identify, in a single attempt, the first five Social Security digits for 44 percent of individuals. And they got all nine digits for 8.5 percent of those people in fewer than 1,000 attempts.

For smaller states their accuracy was considerably higher than in larger ones.

Acquisti said in a telephone interview that he has sent the findings to the Social Security Administration and other government agencies with a suggestion they adopt a more random system for assigning numbers.

Social Security spokesman Mark Lassiter said the public should not be alarmed by the report "because there is no foolproof method for predicting a person's Social Security number."

"The suggestion that Mr. Acquisti has cracked a code for predicting an SSN is a dramatic exaggeration," Lassiter said via e-mail.

However, he added: "For reasons unrelated to this report, the agency has been developing a system to randomly assign SSNs. This system will be in place next year."

The researchers say their report omits some details to make sure they aren't providing criminals a blueprint for obtaining the numbers.

The predictability of the numbers increases the risk of identity theft, which cost Americans almost $50 billion in 2007 alone, Acquisti said.

A problem in the battle against identity thieves is that many businesses use Social Security numbers as passwords or for other forms of authentication, something that was not anticipated when Social Security was devised in the 1930s. The Social Security Administration has long cautioned educational, financial and health care institutions against using the numbers as personal identifiers.

"In a world of wired consumers, it is possible to combine information from multiple sources to infer data that is more personal and sensitive than any single piece of original information alone," he said, warning against providing too much data on social network sites.

Acquisti, who researches the economics of privacy, said he got interested in what could be learned from easily available by looking at social networks, which he termed "a great experiment in self-revelation."

People were willing to include their date of birth and hometown, he said, and he already knew that was part of the information used in issuing Social Security numbers.

So the researchers turned to the SSA's "Death Master File," which lists the numbers of people who have died. The purpose of making that file public is to prevent impostors from assuming the Social Security numbers of deceased people.

But by plotting the data for people listed on the file between 1973 and 2003 the researchers were able to develop patterns for number issuance.

"I was surprised by the accuracy of certain predictions," Acquisti said.

The system can produce a range of possibilities for the last four numbers, making it easier for a computer to test the possibilities until the correct number is found for an individual, Acquisti explained.

In addition, "attackers can exploit various public- and private-sector online services, such as online "instant" credit approval sites, to test subsets of variations to verify which number corresponds to an individual with a given birth date.

While it was well known that the numbers have a geographic component, past studies have used the patterns plus other data to estimate when and where a specific number may have been issued.

"Our work focuses on the inverse, harder, and much more consequential inference: it shows that it is possible to exploit the presumptive time and location of SSN issuance to estimate, quite reliably, unknown SSNs," Acquisti said.

The research was supported by the National Science Foundation, the U.S. Army Research Office, Carnegie-Mellon University and the Pittsburgh Supercomputing Center.