it's not about being lazy, it's about being realistic - when was the last time a hacker cared about your social security number, anyway?

I agree that hackers usually aren't after SSNs, but what about employer login credentials? Those can be just as valuable when it comes to ID theft and phishing scams.