A national id number should have never been considered any more privileged or authoritative than a name in the first place, any business that does so is being criminally negligent.

I mean, that is why they exist, to replace names, or perhaps more accurately act as a surrogate key for names. The government specifically said don't use the SSN as a secret, and businesses did so anyway.