A more more direct anecdote: I just got a replacement social security card by mail. All it took to do it online was information from my credit report.

Thanks to this breach, the only defense against someone getting my social security card fraudulently is that it has to be mailed to my current address.