If you haven't frozen your credit with the three credit bureaus (whether you were part of the OPM hack or not!) you really should. Actually from a fraud standp

If you haven't frozen your credit with the three credit bureaus (whether you were part of the OPM hack or not!) you really should. Actually from a fraud standpoint Experian was much worse. Whomever hacked OPM was probably a state actor and more interested in the data for other purposes. Credit monitoring is useless. It just lets you know earlier (maybe) that you have a mess to clean up. What should be criminal is the utter lack of real security/identity validation from banks, financial institutions, the IRS, etc. that causes the mess after these breaches.