Good job at reading.
“The IRS also has been issuing Individual Taxpayer Identification Numbers, or ITINs, for 12 years to foreigners without a Social Security number. It’s believed that many workers who seek the ITINs are in the country illegally, and the IRS reported that there were 2.5 million tax returns filed with an ITIN in 2004.”
Yes, there were 9 million W2 forms that used mismatched names/SSNs, but it doesn’t say anything about stolen. Plus if the “stolen” numbers matched that of a citizen, then there’d prolly be quite the fiasco involved.