The article says more clearly “2.7 billion records with Social Security numbers.” The author goes on to say he found 4 records with a friend’s data but in those 4 records were 3 different SSNs. He called the friend and confirmed that one of them was his actual SSN. I guess someone was auto-linking names and SSNs for ID theft purposes and getting it wrong sometimes.