Identity Theft & Data Protection

Report it to the police, place a fraud alert or freeze with the credit bureaus, and get copies of your credit reports so you can see the full scope of what was opened. Write down dates and keep every letter and email. The police report is not a formality — it is the document that unlocks several of your rights against the bureaus and the companies that opened the accounts.

Minnesota law addresses this directly. Under the state identity theft statute, when a victim makes a complaint, the agency must prepare a police report of the matter and provide the complainant with a copy of it. If you were turned away, say that you are asking the agency to prepare a report under the Minnesota identity theft statute, and ask for the copy the statute says you get.

Sometimes. Minnesota law requires a court sentencing someone convicted under the state identity theft statute to order restitution of at least $1,000 to each direct victim of the offense. That depends on there being a conviction, which is outside your control. Recovery against the businesses and credit bureaus that mishandled the aftermath is a separate path and often the more realistic one.

It depends heavily on what was exposed, what the company did or failed to do, and what has actually happened to you since. Exposure alone is often not enough; concrete misuse — fraudulent accounts, drained funds, tax fraud — changes the analysis. Preserve the breach notice you received and document any fraud that follows, because that record is what a claim is built on.

Deadlines here are short and vary by the type of claim. Federal Fair Credit Reporting Act claims generally must be brought within two years of discovering the violation and no more than five years after it occurred. Other theories carry their own clocks, so the safe approach is to have the deadlines analyzed early rather than after the disputes have run their course.