3.6 million Social Security numbers compromised