As for her social security number, that wasn’t released. The last 4 numbers are X’s just the same way the government and the banks do it when they send things to me online. I doubt anything was breached here.Actually, most everyone asks for only the last four digits of your SSN. Releasing all but that is dangerous and irresponsible.
That's correct. It's because the last four are the most unique identifiers for the holder.