It’s a fault in the system for using an unsecured SSN as an identify instead of what it was initially used for.
It is alao the fault of the government for not putting a halt to and punishing those corporations who decided to hijack SSNs and treat them as some kind of secret code.