Many companies accept publicly available information such as a Social Security number as a means of [partly] authenticating a user. This is a typical policy problem where government, law enforcement and the technology industry need to work together to encourage proper authentication methods.