I was at a conference last year and one of the speakers was discussing cyber security and specifically identity theft. He pulled up a site on the dark web where you can purchase stolen credit cards, and showed us just how many people have their credit cards listed on these sites. He pulled up a small town in Minn., population of like 2700 (including children), and there were 2200 credit cards for sale from that area. His theory is that people try to purchase stolen cards for people in or around their own vicinity, as that is usually less likely to be flagged by the banks and credit card companies.
I think the big issue is the big retail hacks, like the Target one a while back, and things like the Equifax breach. If you were caught up in the Equifax breach, your personal information sufficient to open all sorts of accounts in your name will be available for purchase and use by criminals for pretty much ever. It's unfathomably scary to think about.