People who’s identity was stolen should have recourse against the person and their employers.
Completely agree.