Headline is misleading and the beach is relatively small, but you should proactively freeze your credit anyway. I had my identity stolen a few years ago due to an insurance company I'd never heard of getting hacked and it was a huge mess. The whole incident taught me that it's not a matter of if your identity will be stolen- it's when. Thousands of companies have your PII (personal identifying information) even if you have never heard of them or have never done business with them because your insurance works with them or said companies legally buy your info from other companies or your state's government. Most of these companies do alright protecting your data, but when there are so many parties that have it and it only takes one screwing up to get your identity stolen, it's just kind of impossible for them all to do hold the line.
It really pisses me off that citizens are responsible for"protecting" their identities on their own. Obviously the system isn't working but nobody gives a shit or wants to do anything about it. If everyone should freeze their credit by default then why is this not the default state? Why is a 9 digit number given to us as babies on an un-laminated paper card the main thing standing between us and identity theft when you have to give that number to everyone to do anything anyway? It's completely absurd.