“Identity theft” is bullshit. They didn’t steal an identity, they stole credentials. But even though those credentials were created and maintained outside of our consent, control, and often contrary to our interests, somehow we’re responsible when they get stolen.