Revealing the last four digits can compromise one's security.  Here's why:
  -- Social security numbers are (or at least, used to be) issued in 
sequence by each SS office.  That means an office might issue 999,999 
cards with the same first three numbers.
   -- If a thief can identify the approximate time and place a SSN was 
issued, (such as a birthplace and year) they may discover the first 
three numbers
   -- If the thief also obtains the last four numbers, which many people 
freely give, there are only 99 combinations to try before cracking the code.

The chances of this happening may be slight, but I still think that 
revealing one's last four digits compromises one's security.

Just my two cents....

Gordy
Gordon E.J. Hoke, CRM
Plainview, Minnesota, USA

On 7/7/2011 3:06 PM, Laura Boldt wrote:
> I work for a large utility company and a guy in the IT group asked my opinion
> on HR using the last four digits of employee’s social security number to identify
> their records in Documentum.  HR records are not my area of expertise but my
> gut reaction is that they should use another indentifying number.
>
> First question, am I off base in my gut reaction?  If I’m not, is there any
> standard, guideline, etc. that I can point them to for reference?
>
> Thanks,
>
> Laura Boldt CRM
> [log in to unmask]
>
> List archives at http://lists.ufl.edu/archives/recmgmt-l.html
> Contact [log in to unmask] for assistance
> To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
> mailto:[log in to unmask]
>

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]