The critical vulnerability in the system was the absence of cross-referencing between birth and death records across different jurisdictions. A child born in California who died in Washington had a birth record in California and a death record in Washington. In 1988, there was no reliable automated system connecting these two records. A California vital records office receiving a request for a birth certificate had no mechanism for checking whether the person named on that certificate had subsequently died.
The Social Security Administration issued Social Security numbers to individuals who presented documentary evidence of identity and citizenship. In the 1980s, the process of verifying that documentation was limited. A legal name change, supported by a court order, produced documentation that could then be used to establish new supporting identification.
The sequence Kimberly McLean followed — birth certificate, state ID, legal name change, Social Security number, driver’s license — was an escalating process of legitimization. Each step built on the previous one, and each step produced official documentation that made the next step easier. By the time she had a Texas driver’s license and a Social Security number in the name of Lori Erica Kennedy, she was no longer dependent on the original certificate from Kern County. The new identity was supported by a network of official documents that referenced each other.
The Identity Theft and Assumption Deterrence Act, which formally codified federal identity theft as a crime, was not enacted until 1998 — ten years after Kimberly’s transformation into Lori Kennedy. Before that legislation, prosecutions for this type of fraud relied on older statutes addressing impersonation and fraud, and the legal framework for treating the individual whose identity was assumed as a victim was underdeveloped. The systemic vulnerabilities that allowed Kimberly McLean’s transformation were not peculiar to her situation; they were the documented structure of a system that had not been designed with the cross-referencing and verification that would have been needed to catch what she did.