Shocking.
I think this has been posted here before:
view-source:https://www.usds.gov/
view-source:https://www.whitehouse.gov/ (specifically line 9, the first comment)
I think I posted here way back that I discovered that if I knew the customer name, I could look up all their past travel on... Jet Blue I think. Their database was fully searchable with a site: search. But releasing SSNs is really next-level. I hope Khan's countersuit is successful and that the state has to pay some sort of civil penalty for the data breach.