Say you want to (illegaly) obtain someone's ssn. You call their employer and impersonate them and ask for the ssn or ask for a 1099 to be mailed which has the ssn.
Is this a major loophole to get anyone's ssn? Is there a specific law against it besides mail tampering which is hard to prove?