Social Security numbers should really not be considered secret data. Too many places have leaked them.

Maybe – maybe – they’re okay for uniquely-identifying someone, but they’re a really bad way to authenticate someone.

I mean, this breach alone – if these are Americans – is something like 20% of the US population.

You can’t rely on something as authentication data if 20% of the population has irrevocable credentials that are floating around.