Multiple disjointed government databases and people not checking each one carefully is how it starts. Once you have an existing account in some one’s name, probably even less checks are done allowing you to exploit the system further. Meanwhile, relatives of the deceased are probably not too concerned about contuining to monitor their credit scores… etc