Ah the old “malware detectors have the selectors for malware and so they show up as malware to other malware detection systems” problem.

Yeah, that seems like a reasonable case to have duplicate SSNs.