IRS has all your personal information. Their agents often covertly sell it to other criminals on the outside. This is part of why several million fraudulent returns are filed every year. Someone filed one in my name 2 years ago and it is still an open case.
I didn’t know that agents sold data very often, although it stands to reason that every potential corruption vacuum will be filled.
What I have heard is that the IRS is very slow—some would say deliberately slow—to help in cases of clear identity theft. Some say that “comes from the top” as many thefts of SSN numbers are a convenience to illegals who need to have a fake one to work. Screw the law-abiding citizen.