Malware can steal customer social security numbers from finance and insurance department computers.