The way we operate at the agency is as follows: As soon as we suspect that identity theft has occurred, we block the account and then we communicate directly with the individual, individuals or company concerned.
Only in cases where the issue is more widespread, such as during the COVID‑19 pandemic, do we alert the public. However, the individual or individuals involved were immediately notified.