I was recently horrified to realize the shopping cart company I use for my online business has been putting my Social Security Number on customer receipts. What do I do now?

When your SSN is leaked through your business

In 2024, a massive data breach involving data broker National Public Data resulted in the exposure of Social Security numbers for over 270 million Americans – considered to be one of the largest breaches of sensitive personal data in U.S. history. But there are also risks involved when your own SSN as a business owner is exposed.

While the chance of a random customer using your Social Security number from a receipt for fraudulent purposes may seem remote, it highlights a broader concern: There could be numerous places throughout your business operations where your SSN is unnecessarily exposed to risk. Your SSN can often be found on online business tax forms, and depending on where you live, business licenses and permits.

Social engineers could also utilize the contact information you’ve posted online to pose as a customer to try to get you to reveal your SSN. They could also hack through your store’s cybersecurity protection system.

If cybercriminals obtain your Social Security number, they can inflict significant damage on your online business. They may open unauthorized credit accounts or secure business financing under your identity.

Dave Ramsey’s plan has people crushing debt fast

Drowning in debt? Dave Ramsey’s viral 7-step method is helping people wipe it out and finally build real savings. No gimmicks—just a clear plan that works. Moneywise breaks it down so you can get started in minutes. If you’re serious about getting ahead, don’t miss this.

See the steps

What to do during a leak

If your Social Security number has been exposed through your online business, it’s critical to act fast — not just to protect yourself, but also to safeguard your customers and preserve your business’s integrity.

Report the leak to the Federal Trade Commission (FTC) right away and fill out the information on their identity theft site. Next, place a fraud alert on your credit report at any one of the three major credit bureaus (Equifax, Experian and TransUnion). The alert lasts one year but you can extend it if the matter isn’t resolved quickly enough.

Third, freeze your credit – you must call all three bureaus to freeze your account. Freezing your credit is free and restricts access to your credit report, helping prevent new fraudulent credit accounts from being opened in your name. And if you suspect any fraudulent business tax filings using your SSN, file an Identity Theft Affidavit through the IRS.

Even though the breach was of your personal Social Security, you may be legally obligated to inform customers, clients and vendors of the leak, depending on where you live.

Preventing an SSN leak

Discovering that your Social Security number may have been compromised during business transactions can be alarming. However, there are proactive measures you can implement to protect yourself from potential identity theft.

Consider applying for an Employer Identification Number (EIN) to use on business forms and payment processors in place of your SSN. Don’t make business transactions or share personal information through email or unsecured sites, and make sure to enable multifactor authentication on all banking, payment and online marketplace sites.

Consider investing in more advanced cybersecurity software for your business, including password managers, encrypted data storage and cloud platforms. You may also want to consider purchasing Identity Theft Insurance for your business.