All it takes is someone to go join a website...there are plenty of websites out there with all your personal data on them (You've probably filled out shitloads of crap in your life...). The data gets collected by companies that want >compressed< info at their finger tips. With this pretty much anyones identity can be stolen if they join X number of websites.

First, they steal your personal information by:

-Going through your mail or trash, looking for bank and credit card statements, pre-approved credit offers, and tax information.
-Stealing personal information from your wallet or purse such as identification, credit, or bank cards.
-Completing change-of-address forms to redirect your mail.
-Acquiring personal information you share on unsecured sites on the Internet.
-Buying personal information about you from an inside source -- for example, a store employee that gets your information from a credit application or by "skimming" your credit card information when you make a purchase.
-Getting your personnel records at work.