A couple months ago somebody at the University of Maryland decided it would be a good idea to send an advertisement for on-campus parking to all 24,000 students registered for Fall classes, and put their social security number on the label, just for good measure. More likely everyone's SSN was in one big database, and the wrong form field was used, but that's how these things happen.
They realized this pretty fast, and offered everyone affected a year of a credit monitoring service. I figured I might as well sign up, because I couldn't remember if I got the flier or not. I would have thrown it out immediately. I set up the account online, but I had to make a phone call to verify my identity, or so they say. I called them, and the first thing they asked for was my SSN. Lame. But I caved pretty fast. Then they asked me a lot of other personal info, and finally made me verify a couple items on my credit report. I don't have much credit, so I didn't know what was there. They said, essentially, out of luck buddy, come back later.
Last week I figured I might as well request a free credit report and see if anybody's been doing some tinkering with my financial wellbeing, other than the stock market. It was, somewhat comically, very easy. Name, birthday, social security number, you're good to go. Got my credit report. Nothing exciting.
Today I thought, maybe I can use that information to sign up with the monitoring service. Yep, no problem. Called the number, gave them my social security number, pulled a couple items off of the credit report, and they emailed me my password and I'm good to go. Slightly disconcerting. My attitude is essentially, once your information is out there, in any database, it's fair game. Keep your info private. Don't trust people to use it responsibly. The less who have it, the better.