My wife and I had to lock down our credit reports with the bureaus in 2020 when we sold our house and someone tried to use our address as a drop for unemployment benefits and other financial applications. We fortunately had a mail hold we placed the week before the house hit the market so we were able to intercept everything that came in. The state unemployment agency didn't give a damn and just told us to destroy the cards. They didn't even want to know the names of the people who had been compromised.
When credit applications started coming in for our names, we reported the identity theft and that's when we locked our reports. The bureaus don't make it easy to navigate their sites to find how to do that. It needs to change.
Unfortunately, our mortgage is with Mr. Cooper. At least our reports are still locked down because these guys couldn't even properly calculate the escrow amount needed to cover taxes so now we have to make up the shortfall over the next year since it took them most of the year to fix the issue.
Until holders of personal data in the Insurance and Financial industries start facing serious punitive damages for failing to secure customer data because they are so desparate to share it, this issue isn't going away. I've worked in IT departments for both industries and the corners executives cut are appalling.