SSN and DOB must be downgraded for online security purposes
For some time now, knowledge of SSN and DOB no longer qualify to securely identify someone, especially (but not exclusively) on the internet.
All financial, health, phone and internet service providers, and any other entity who thought these items were valid to identify a client, should stop ASAP. Although less than perfect, such vetted ID services as ID.me must be utilized, at a minimum, for a more secure form of client identification.
This includes the consumer credit reporting agencies. This means that just SSN cannot be sufficient to run a credit check or open a line of credit. Also, last time I tried it, aside from SSN and DOB, I only had to answer (or guess) a handful of easily researched questions about past addresses, car loans, etc. to gain access to my complete credit report.