SSN should be 1MM+. It is a password to your national identity that can be used to steal your identity and effectively cannot be revoked once leaked. It is a permanent grievous injury to someone to leak it.
I'm with you, but the only people handling less than a few dozen SSNs though are very small businesses. Bankrupting some convenience store owner who accidentally discarded an old laptop with a couple W-4 forms on it doesn't serve much of a purpose. The real jackasses are the large companies who keep thousands of SSNs and get breached, so for them $1000 adds up.