[Mayson]

One of the most reliable ways is to have access to an extensive SSN/DOB database (there are some less known shops that are linked to LexisNexis databases). Once you have that, then you simply query the DB/shop for your CC holder's name and you purchase the corresponding SSN/DOB and you have your fullz right there.
The other way is, of course, phishing.