Partial government issued IDs leaked: what it means and what to do

What this data is

Fragments of an identity document number, such as the last few digits of a social security number, driver licence or passport, sometimes with the document type or expiry date.

The risk on its own

Partial digits cannot be used to open an account by themselves. The trouble is that many organisations verify people with exactly these fragments, for example the last four digits of a social security number. A fragment that was designed as a verification shortcut is worth nearly as much as the full number in the wrong hands.

The risk combined with other data

Joined to your name, date of birth and address, partial ID digits pass knowledge checks at banks, telcos, payroll providers and government helplines. Fragments from different leaks can also be combined to rebuild a full number. That combination is the foundation of new account fraud and synthetic identities.

How criminals use it

• A caller gives your name, date of birth and last four ID digits to a phone carrier and moves your number to their SIM.
• Someone contacts your employer's payroll provider, passes the check with partial digits, and redirects your pay.
• Two leaks with different digit ranges of the same number are combined to rebuild the whole ID.
• A fake government agency email shows the correct partial ID number to convince you to upload your document.

What to do now

1. Place a credit freeze with each credit bureau in your country so new credit cannot be opened in your name.
2. Ask your bank, phone carrier and payroll provider to add a verbal password or PIN beyond ID digits.
3. Set a number port out lock with your mobile carrier.
4. Check with the issuing agency whether the document can be replaced or flagged, which some licence authorities allow after a breach.
5. Never upload a photo of an ID document through a link in an email or text. Go to the official website yourself.
6. Review your credit report now and again in a few months for accounts you did not open.

Frequently asked questions

Only the last four digits leaked. Is that serious?

It can be. Many companies use the last four digits as a verification step, so the fragment works as a key for phone and online checks.

Can I get a new ID number?

Driver licence numbers can often be reissued after a breach. Passport and national ID numbers are much harder to change, so focus on freezes and extra account checks.

Should I freeze my credit?

If your name and date of birth also leaked, yes. A freeze is free in many countries and stops new credit being opened in your name.

Breaches that exposed this data

• ADT: 2026-04-20, 5.5M accounts, Dates of birth, Email addresses, Names, Partial government issued IDs, Phone numbers, Physical addresses

Tools that help

• Email Breach Check
• Phone Exposure Audit
• Phishing Link Checker

Related guides

• Credit Freeze Guide: US, Australia, UK and Canada Steps
• Identity Theft Checklist: What to Do in the First 48 Hours
• Synthetic Identity Fraud: Protect Your Child's Credit File
• SIM Swap Protection: Lock Your Number With Your Carrier