If someone hacked your e-mail, a database, found your SSN off of some old document, stole your mail, or was digging through your garbage it is highly unlikely they would also have your ID to copy. Not guaranteed proof that you are really you, but it is more reliable than just a phone call. If it was the first attempt at ID theft, then yes - you would have spotless credit. You would continue for probably 60-90 days even if they opened 10 accounts as it would take that long for them to report and go delinquent.