Thank you! My friend wasn't aware of these details before, but I'm sure she doesn't have my SSN. I think the actual situation is that the third-party company used their own SSN to apply this EIN as the TPD (Third Party Designee).
