New attack steals SSNs