The federal Office of Personnel Management chose CSID as the monitoring service for those federal employees whose information was hacked. I signed up. CSID sends many email alerts saying some activity had been detected and I should login to review my file. Way more often than not, the report is incomprehensible to me. A few times, I called and asked what the report was trying to say; I got no meaningful response. Of course, it could be that I am not intelligent enough to use the service.
Following another federal data breach, OPM again offered some monitoring service. As far as I could tell, both it and CSID are children of the same parent company. The CSID sibling had typos on its web page and some other red flag that I do not recall. I did not register with the CSID sibling.
As far as I can tell, CSID is above-board but not fully competent. Again as far as I can tell, it hasn't hurt me to register with CSID, but it hasn't accomplished anything for me, either. I agree completely with the statement about passwords. CSID gives the appearance of being slapped together to take advantage of data breaches by charging the likes of OPM and Hyatt for services. I cannot imagine why anyone would pay his or her own money for the service it provides.
This is all my opinion, of course.