Not even that complicated - SSN are not unique, by design. The combination of SSN and name is supposed to be, but for most of the history of the program no one was actually checking for that so it really isn’t either. Until something like 2014 the first 5 digits of your SSN were basically a code for where you were born and the last 4 were just assigned in order.

That, or he doesn’t understand composite keys.