s/o identity theft--should I be worried?