Already becoming a major problem. I’m sure they’ve got my id because I’ve had to verify several things over the last couple of months
I’m just expecting a letter any day now that says, verbatim
"Here’s 3 months of identity monitoring, lmao good luck 
”
I suppose I can delete my LinkedIn now (they wanted an ID). Or… Anyone can.
What would be the best solution to replace photo ID and SSN in the US? Or if you were starting from scratch.
Estonia is a great model of what to do. It’s not perfect (I might never be sold on e-voting) but it might be the best of any nation. Not only that, but it seems like they truly care about creating and maintaining a great system. It’s not just some checkbox. They take security concerns seriously. This is a great article.
I think reverting to a time when we don’t scan everyone’s shit would be the simplest and best route but that ship has sailed imo. So, technical solutions that protect people’s identities seem like the best option. And, really, I have no problem with a dispensary or bar ensuring I’m me and of age. Or that potentially dangerous pharmaceuticals are going to the right person. That’s reasonable. It’s the data-collection machine and mishandling of information that’s unreasonable.
A few other notes:
- Outlaw data-brokers
- Levy severe fines against companies that leak user data
- Update the Privacy Act of 1974
- Pass a constitutional amendment that specifies citizens fully own their personal data
- Make banks responsible for giving out bad loans. “Identity theft” is an invented crime to absolve banks of doing their due diligence.
None of this is likely to happen in the current environment. 
Although, I like to believe that a bribery-resistant politician could absolutely wipe the floor running a campaign on these things. On one hand, most people don’t care. On the other, you could unite people across ideological lines with that. Taking power away from the corporations and government while also retaining the level of “safety” we are used to. Everyone wins.
This breach really hits different. People should be screaming from the rooftops about the leak but nobody I’ve talked to has even heard about it. So I’m led to believe MSM isn’t telling anyone anything.
Edit
As of now, it looks like Hertz, FedEx, Ceasers, Planet13, and GameStop are the only known businesses affected by this breach.
It surprises me that it’s not always explicitly disclosed who companies like this use to process sensitive user data.
I would just add another id number to everyone. One that isn’t connected to anything sensitive. It’s only purpose would be to id a person.
As for the requirements to receive an id number? I’m not sure. It could be your DL or whatever.