This is why any identification period should start from birth. Parents and relatives, possible kindergarten, home addresses, schools, etc. Something that might be much harder for the thieve to remember. And too many failures in these should destroy any later evidence completely.
How would this work for "any identification period"? Any time I want to apply for a credit card or move house or enrol in a school, someone responsible needs to quiz me on all those things and verify them in a way that is secure, yet doesn't leak information to the next identity thief?
This is madness. Instead, you have a fairly rigorous process for some form of state-issued ID, and allow using that to reduce friction in every other identification process.
In this case, the identity thief fraudulently obtained a state ID, and later a birth certificate, which really does "start from birth". The institutions that issued him with those probably could have done better, but they can't stop everyone, and they need to make some tradeoffs when demanding documentation from decades ago just to let their citizens participate in society.
