Shitty as it is, this is the conclusion I had already come to.
The idea that my SSN and identity was not already out there seems pretty far fetched given the number of breaches.
You want to fix this? Levy insane fines on banks that send collection notices to the wrong person.
Remember: my social security number is not me. If someone provides a false SSN and address to a credit agency and the credit agency gives them money, they haven’t stolen my identity. I am still me. The bank gave someone else a loan based on erroneous data, and then sends the collection notice to me. Treat those as what they are: fraudulent collection notices rather than “mistakes” and fine them accordingly, and they will shape up.
Obviously that doesn’t fix every type of doxxing (medical information), but it would go a long way.
