Charities expose almost 500K Social Security numbers by filing their own taxes