Data Points

🪪 National ID Number

A government-issued personal identification number — highly sensitive PII.
Identity

Sources

1
1 no-auth

Disciplines

1
that use it

Mission domains

1
reach

Workbench

native tool

🔌 Sources that yield National ID Number (1)

SourceCategoryAuthFormat
National ID formats
ID-number validation references.
IdentityNONEhtmlhome↗ api↗

🧭 Disciplines

IDENT (1) →

🎯 Mission Domains

Fraud & Identity (1) →

🔍 Lookup

📜 Playbook — National ID Number exploitation

  1. Direction — frame the requirement for National ID Number: what decision does this support, by when?
  2. Collection — pull the 1 mapped sources (1 free) and the native workbench; capture provenance and observe OPSEC.
  3. Processing — normalize, de-duplicate and enrich the collected data.
  4. Analysis — correlate against local holdings; apply ACH; assign confidence.
  5. Dissemination — open a case, draft a report, share via STIX/MISP.
  6. Feedback — set an alert rule / watchlist to monitor for change.

⚡ AI Skills & Automation

🤖 Copilot brief⚡ AI SkillsResolveEnrichAuto-CollectHuntReportExport

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🎫 National ID Number

A national ID number is a government-issued identifier for a citizen or resident (SSN, passport number, national insurance number, Aadhaar, tax ID), often carrying embedded structure like birth date, region, or checksum. It is a strong deterministic identity anchor for KYC, sanctions, and fraud investigations, but is highly sensitive PII requiring strict handling.

Format: Country-specific: US SSN NNN-NN-NNNN; passport typically 6-9 alphanumeric per ICAO; India Aadhaar 12 digits with Verhoeff checksum; many carry checksums or embedded DOB/region codes. Validate against per-country format and check-digit rules.

📡 How it is collected

  • Breach and leaked KYC/identity datasets
  • Corporate registry and beneficial-owner filings
  • Government open-data and gazette records
  • Court and litigation documents
  • Sanctions/watchlist entries carrying ID numbers
  • Document forensic extraction (passports, IDs)

🧩 Analysis & hunting techniques

  • Per-country format and checksum validation
  • Embedded-data decoding (DOB, region, gender)
  • MRZ parsing and check-digit verification
  • Sanctions/watchlist ID matching
  • Breach-corpus identity correlation
  • Synthetic-identity and fraud pattern detection
  • Cross-jurisdiction ID-to-person resolution
  • Duplicate/shared-ID anomaly detection

🔧 Tools

  • python-stdnum
  • passporteye (MRZ)
  • OpenSanctions matcher
  • Maltego
  • OpenRefine
  • Aleph
  • VIES (EU VAT)
  • custom checksum validators

⚡ Workbench actions

  • Validate format and checksum by country
  • Decode embedded DOB/region
  • Parse and verify MRZ
  • Screen against sanctions lists
  • Check breach exposure
  • Resolve to person entity
  • Detect duplicate/synthetic use
  • Redact and log sensitive access

📊 Dashboard KPIs

Checksum validity statusSanctions match countBreach appearancesLinked person confidenceIssuing-country resolution
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php