This is really disturbing. When the news first broke, they wouldn't even list which financial institutions were involved. Now, at least you can see whether your account could have been among the ones hacked. But they still haven't released the name of the "third-party payment card processor". I wonder what their liability is. When I was with the Social Security Administration, I had to deal with several identity theft cases, and it was incredible how little we could do to help these people. Generally their credit was destroyed, and they had to spend long hours bouncing back and forth between the local police, the credit agencies (who can only be reached by phone), and SSA. Obviously there are difficulties when it comes to proving these things - you don't want it to be easy to change your identity - but it would be nice to see some policies addressing this.