How not to handle a data breach: http://www.zdnet.com/article/equifaxs-big-fat-fail-how-not-to-handle-a-data-breach/
"Only" requires the last six digits of your SS. The funny thing is, the first 3 digits are the only digits in your social security that isn't random. So by giving them your name and social security, you basically give them your entire name and entire social security number.