Health Department staffer asked for my SSN and hung up on me. How cooked am I?

I recently got a letter in the mail from the state Department of Health claiming that a hospital I stayed at tried to apply for Medicaid on my behalf. Since I was already working full time with employer-provided insurance, this immediately raised a lot of red flags. I looked up the return address and phone number to make sure I wasn't getting scammed, everything checked out, so I called.

The agent asked for my full, nine-digit social security number. I gave it without thinking. She hung up.

My first instinct was to look up what to do about a compromised SSN, which included freezing all credit files and doing a DHS self-lock. But when I tried, I was already locked out of the website for failing the verification quiz too many times. When I logged into Experian, it showed one soft pull from US Citizenship and Immigration Services.

The USCIS soft pull could be from my own login attempt, but the fact the verification quiz was already failed is a bit concerning.