Major data breaches have led to billions in identity theft losses, with victims spending weeks resolving fraud and repairing credit.