You are not required to give it, but neither are they required to conduct a BI and promote you. The SSN for a BI keeps you from being mixed up with other people, simply.

Rather than freak out, I would ask HR what provisions are contracted and/or legally binding on the holder of said info in the event they suffer a breach and your information is spilled into criminal hands.