All right then. Let's define a Rating 1 SIN. It suggests that the biometrics server is local and holey since it's the first place everyone goes to insert infoz, yes? An aging computer somewhere in the HR department of every local corporate office?
A SIN is issued by a major body like a government or an extra territorial mega-corp. So you gotta figure their ID database is available to certain contracted verification services. Maybe it isn't public. Maybe some verification services collect the data and make it available to organizations for a fee (probably scaled to how fast, complete, and accurate they are). Some google-esque services probably throw it out there for free where it's used by tiny stores, social connectors, and marketers. I imagine your local t-shirt stand on the street corner pings your SIN against the cheap, free, inaccurate, and widely hacked verification service. Starkaf on the other hand is a small coffee shop, but it's run by a corporation with enough funds to verify through a slightly more reliable pay service. Knight Errant is going to be more rigorous and use a verifier that can connect to their criminal databanks, some government sources, some corps.
So if you want something as weak as a Rating 1, you could pay a college nerd to insert you into the google-esque free verifier or any of the other easily hacked ones. Or you could bribe one of the guys who has access to data entry on the cheap verifier to write you in. It's not going to hold up well though. Even the t-shirt stand on the corner can ping your SIN against a couple free services.
Mesh