Yes. And not just the last 4 but your entire SSN, and most or all of the data that Credit Bureaus maintain, such as date and place of birth, past places of residence, whether you own or rent, income, education, marital status, and on and on.

It's all been exposed, somewhere, by someone who didn't exercise due care for protecting it.

Until this data becomes a liability and not an asset that can be sold and expoited, it will continue.