They got everything. Socials, DL #s, addresses, tons of personal identifying information. This can be used to take out loans in your name and other life-destroying shit.
You can freeze your credit reports indefinitely to lock everything down and prevent anyone from pulling your report. I just went with the less drastic option of submitting a 90-day fraud alert with the reporting agencies, which requires lenders to call you before opening any new accounts.
Setting up a fraud alert with one credit reporting agency automatically applies it to all 3. This took me 5 minutes over the phone: Equifax - 1-888-766-0008
gl everyone