[Calcite]

The article and comments are intense. The most likely scenario is that this 19 year old tested the Heartbleed vulnerability on the CRA and obtained SSN throught the exploit. I doubt the intention was to "steal" them or use them for criminal motive.

[wvenable]

It's entirely possible he didn't even know he had any numbers and perhaps never even saved it to disk.