Identifying Social Security case without violating PII