For identity theft, I think at this point it depends on where you set the bar. I've never had someone clean out my checking account or anything truly large, but my wife and I have had fraudulent charges on our credit cards several times as they've been leaked out one way or another. I would not "identify" as a "identity theft victim" per se if you asked me out of the blue, because compared to some of what I've heard about, I've had nothing more than minor annoyances come out of this. But yeah, I'd guess that it's fair to say that at this point most people have had at least some sort of identity-related issue at some point.