Your Social Security number is exposed — what actually helps

Of everything in this category, an exposed Social Security number is the one where the usual advice fails. You cannot opt out of an SSN the way you opt out of a phone listing, and you almost certainly cannot get a new one. That makes this a containment problem rather than a removal problem, and the steps that help are different from the ones you'll read everywhere else.

What you need to know first

You cannot remove a Social Security number from the internet. Once it is in a breach dump it is copied, mirrored and traded indefinitely, and no service can retrieve it. Anyone selling you SSN removal is selling something that does not exist. The Social Security Administration will only issue a new number in narrow circumstances — typically ongoing harm from documented misuse — and a new number does not erase the old one's history. Treat the number as permanently compromised and make it useless instead: a credit freeze does more for you than any removal service can.

Where your Social Security number comes from

• Breaches of companies that required your SSN — lenders, employers, insurers, healthcare providers, background-check firms
• The 2024 National Public Data breach, which exposed SSNs compiled from public and non-public sources for people who never used the service
• Tax and payroll processors, which hold SSNs for everyone they have ever paid
• Old paper records digitised without redaction, including some court filings

An SSN is the key that unlocks credit in your name. Paired with a name and date of birth — both trivially available on people-search sites — it is enough to open accounts, file a fraudulent tax return, or claim benefits. Unlike a password, you cannot rotate it.

How to remove it, step by step

1. Check whether it is already out there. Search your email address on a breach-checking service to see which incidents you were caught in, then read what each breach actually exposed. Many leaked only emails and passwords; a few leaked SSNs. Knowing which applies to you decides how urgently to act.
2. Freeze your credit at all three bureaus. This is the single most effective step and it is free. A freeze stops anyone — including you — opening new credit until you lift it. Do it at Equifax, Experian and TransUnion separately; freezing one does nothing for the other two. It does not affect your existing accounts or your credit score.
3. Get an IRS Identity Protection PIN. The IRS issues a six-digit PIN that must accompany your tax return. Without it, a fraudulent return filed in your name is rejected. Tax-refund fraud is one of the most common uses of a stolen SSN and this closes it off.
4. Reduce the data that makes an SSN usable. An SSN alone is less useful than an SSN plus your address, date of birth and mother's maiden name — all of which are sitting on people-search sites. Removing those listings raises the effort required to actually use the number against you.
5. Set up monitoring you will actually notice. Credit monitoring tells you when an account is opened. Free options exist through the bureaus and many banks. The point is not prevention — the freeze does that — it is catching anything that slips through quickly.