That would be me!
It started with charges for Air BnB. Called, changed card numbers. Thought that was it. Next statement, more Air BnB charges, now totaling over 10,000 for the 2 statements. Found out they--whoever they are-- set up an online account, and likely had my new number before I did. Online account closed, new card issued. Trip to the police dept. to file a complaint. Called air BnB to let them know what was going on. (By the way, if you ever use air BnB, if you have a problem, it is near impossible to get a hold of someone.That was 2 hours of my life I will never get back.) Went on with my life, until...
Maybe 4 months later, new mysterious charges for air BnB. Sigh. Call. Cancel card. Cancel on line account (that I set up, so they couldn't), and set up special secret passwords that the rep must have to speak to anyone about my account. Called and checked with Comcast, to make sure there wasn't any call forwarding going on. General pain in the butt.
A few weeks later, they tried to open a Paypal credit account. The only way I found out about it, was the letter sent by PayPal thanking me. I called to speak with their fraud dept, and sure enough, they tried to run up a huge tab with air BnB. PayPal was smart enough to freeze it, before I even called. That was in the next days mail.
This, by the way, is despite paying for Lifelock, which I invested in after my police station visit. I have no idea where the breach occurred. When I spoke to the credit card rep the first time, she mentioned they were just notified of a breach, but wouldn't say who. By law, businesses are not compelled to reveal there has been a breach. The bigger ones tend to, only after the info has leaked out. Luckily, all my false charges were covered.
While I was dealing with this, DH was dealing with a total identity theft. We had gotten a few letters of accounts trying to be opened in his name. Did the freeze. Checked credit with the credit companies. Then one night, out of the blue, we get a call from a nearby police dept. It was during dinner, and I figured it was a scam, so we didn't answer. The guy left a message, and after vetting it, DH decided to call on the listed main number for that police dept. It was a real police detective. Apparently, a gentleman in that town had been arrested on a domestic charge. The ID he presented was a drivers license with all of DH's info, but the other guy's picture. When the officer ran it, there was an obvious discrepancy between DH's description, and the guy. When he was arrested, they found a box full of fake id's, credit cards, etc. Our best guess is maybe he knew someone that worked for a branch of our bank, or the dmv. That one is still getting straightened out, and it has been at least a year.