Okay, so don't associate the SSN hash with the account. Come up with a mechanism to store anonymized SSNs to detect duplicate accounts.