Many SSNs have been compromised already. The jig is up. It was never supposed to be an identity system but organisations keep insisting on using it as one. Even if they aren’t literally publicly available and easily obtainable, they should be treated as such.
https://constella.ai/verifying-the-national-public-data-brea...