Identity theft laws in most states make it a crime to misuse another person's identifying information -- whether personal or financial. Such data (including social security numbers, credit history, and PIN numbers) is often acquired through 1) the offender's unlawful access to information from government and financial entities, or 2) lost or stolen mail, wallets and purses, identification, and credit or debit cards.