It’s like running away from a bear… you don’t have to outrun the bear, just the other people running from the bear. If someone wants your identity, they’re probably gonna get it if they’re determined enough. The way these hacks usually work, though, is you just buy a chunk of the data, maybe 10k records. Then, they use automated tools to try and open accounts under those ID records. If it fails, no biggie, they just move on to the next record.