IAmA --- Identity Theft expert --- I want to help clear up the BS in typical ID Theft prevention so AMA
Proof: I posted an update on the most relevant page for today: Lifelock Sucks (also easy to find by searching for Lifelock Sucks on google where I hold the #1 position for that search term!)
Look for "2018.12.10 – Hi /r/IAMA! " just above the youtube video in the post.
Anyway, I've long been frustrated by the amount of misinformation and especially missing information about the ID theft issue which is why I've done teaching, training, seminars, youtube videos, and plenty of articles on my blog/site about it in the past 13 or so years. I'm planning on sprucing up some of that content soon so I'd love to know what's foremost on everyone's minds at the moment.
So, what can I answer for you?
EDIT: I'm super thrilled that there's been such a response, but I have to go for now. I will be back to answer questions in a few hours and will get to as many as I can. Please see if I answered your question already in the meantime by checking other comments.
EDIT2: This blew up and that's awesome! I hope I helped a lot of people. Some cleanup: I will continue to answer what I can, but will have to disengage soon. I want to clarify some confusion points for people though:
- I am NOT recommending that people withhold or give fake information to doctors and dentists or anyone out of hand. I said you should understand who is asking for the information, why they want it, and verify the request is legit. For example, I've had dental offices as for SSN when my insurance company confirmed with me directly they do NOT REQUIRE SSN for claims. I denied the dentist my SSN and still got service and they still got paid.
- I am NOT recommending against password managers or services as much as I'm saying I don't use them and haven't researched them enough to recommend them specifically. I AM saying that new technologies and services should always be carefully evaluated and treated with tender gloves. The reason that breaches happen is because of corporate negligence in every case I know of so it's best to assume the worst and do deep research before handing someone important access. That said, I'll be talking to some crypto experts I know about managers to make sure I have good information about them going forward.