Personally identifiable information (PII)

What it is

Classic PII includes your full name with Social Security number, driver's license, passport number, or biometric records. Broader definitions also cover email, phone, home address, date of birth, and online identifiers when they can single you out.

Scammers and some businesses prize PII because it unlocks credit, benefits, account recovery, and convincing impersonation.

How it works

1. Collection — Forms, employers, clinics, schools, apps, and breaches gather PII.
2. Storage / sharing — Data sits in databases, with vendors, or with data brokers.
3. Exposure — Breaches, phishing, doxxing, or careless disposal leak it.
4. Abuse — Identity theft, synthetic identities, account takeover, or targeted scams follow.
5. Not all PII is equally sensitive — SSN and government IDs deserve stricter handling than a public work email — but combinations matter.

Red flags

• Unsolicited requests for SSN, driver's license, or full verify selfies
• Forms asking for more data than the transaction needs
• Public posts that reveal DOB + address + mother's maiden name together
• Breaches announcing exposure of customer ID fields
• People-search pages listing your relatives and past addresses
• Emails urging you to confirm your identity via a link

What to do if you’re targeted

• **Share the minimum** necessary; ask why SSN is required and how it is stored.
• **Use unique passwords and MFA**; treat email as a root account.
• **Shred or securely delete** documents with ID numbers; do not photo-dump IDs to random chats.
• **After a breach:** change passwords, watch credit, and consider a credit freeze.
• **Opt out** of people-search / broker listings where practical.
• **Optional:** free identity scan and monitoring for dark-web mentions of your identifiers; insurance up to $1M is subject to policy terms.

Related terms

• Identity theft
• Data broker
• Data breach