...attacker can find birth data for 50 percent of the potential targets and that inquiries with the correct first seven of ninedigits are sufficient for a credit reporting agency to answer a positive match in half of the cases, an attacker could potentially...
http://news.cnet.com/8301-1009_3-10280614-83.html