sandy identity theft