Identity Theft occurs when a malicious actor gathers enough personal information from the victim (name, address, date of birth, etc.) to enable them to commit identity fraud – i.e., the use of stolen credentials to obtain goods or services by deception.