@j12t Every SSN leak is one step towards the only solution: a recognition that SSN is public data and should have no authentication value.

(e.g. this blog from 2007: stage.vambenepe.com/archives/1)