Do you have any examples where the data was obtained from sources that collected it for ads? As I understand it, the sort of data that is collected for behavioral advertising isn't useful for identity theft and has not been used in that way.

For identity theft you need things like names, addresses, SSN, W2 income, etc