Identity theft getting worse