Social Security involves sensitive identity data, benefit records, and government systems that can be targeted for fraud, theft, or unauthorized misuse.
Search across headline titles and summaries.
Background for this topic.
Social Security is the U.S. federal program that provides retirement, disability, and survivor benefits, funded primarily through payroll taxes. A Social Security number (SSN), issued for administering the program, is also widely used by employers, financial institutions, government agencies, and other organizations to identify people and verify eligibility.
For security practitioners, SSNs are high-value personal data: exposure can support identity theft, fraudulent benefit claims, unauthorized account creation, or targeted phishing, especially when combined with names, birth dates, or financial information. Relevant controls include collecting and retaining SSNs only when necessary, restricting and auditing access, encrypting them in storage and transit, and using multifactor authentication and stronger identity proofing for benefit and administrative accounts. Organizations should also monitor for anomalous changes or claims and include SSN exposure in privacy assessments and incident-response procedures.
Health Researchers Often Overlook Security of Historical DatasetsAn August 2025 ransomware attack on the University of Hawaii Cancer Center's epidemiology division has affected 1.2 million individuals, including personal information such as Social Security numbers of certain research study participants dating back more than 30 years.