According to McGoey, the key information these hijackers would have needed is Social Security numbers (often the unique identifier for business use), driver's license numbers, and date of birth or birth certificates.
Although HIPAA which enforces privacy and security rules was supposed to develop such an identifier, privacy advocates have blocked it because of the potential for identity theft.