A Social Security number is a U.S. government identifier used for employment, taxes, benefits, and some identity verification steps. Because it is tied to a person’s records and often reused across systems, it is a high-value target for criminals seeking identity misuse.
In cyber security, an SSN is rarely powerful by itself, but it becomes dangerous when combined with a name, role, address, or other personal data. Attackers use it for account recovery abuse, payroll and HR fraud, tax-related fraud, and executive impersonation in business email compromise schemes. Defenders reduce the risk by limiting exposure of SSNs, requiring out-of-band approval for sensitive requests, and verifying identity with more than one factor before changing payment details or account access.