My kid's name, address, and SSN got stolen from an incompetently secured database belonging to the third-party contractor handling mailing services for a health insurance company. They knew about it a year ago, but only told us about it now.

But he gets some free credit monitoring, so all is well.