> Presumably the 143 million identities are valid. Would be an epic troll if 99% were salt/fake only to detect and track use. The 143 million PII records likel

> Presumably the 143 million identities are valid. Would be an epic troll if 99% were salt/fake only to detect and track use. The 143 million PII records likely represent almost every adult taxpayer in the US. These records didn't need to be released purposefully. Even if stolen, nothing but the possession of those records may be needed to authenticate as almost any one of the adult taxpayers in the US. > Authentication is verifying someone is the person represented by a valid ID Why do you believe that auth in this context requires validity of ID or even an ID of any kind? > Its highly likely in a year or two we'll all have Equifax smart chip ID cards. I'm not convinced this is a highly likely scenario.