Yes, exactly. In the US the financial institutions and the credit reporting and collection agencies have used rather insidious language like "stolen identity"

Yes, exactly. In the US the financial institutions and the credit reporting and collection agencies have used rather insidious language like "stolen identity" to describe the situation where fraud was perpetrated on one of those agencies by an unknown 3rd party who presumably bore the ID credentials of the person in question thereby passing through the institution's identity checks. The fraud in these cases is not the problem of the institution, it's the problem of the individual. They use that specific language to train everyone into thinking and accepting that it's their individual problem...you know, since someone "stole their identity". Then, when the giant companies that collect and "securely store and process" the information that is typically used to perform ID verifications get hacked and this data leaks out for 300M+ people... oh well, tiny fine and a bit of bad press for a week. Then it's swept under the rug and the individuals in the society have to live with those consequences. It's super fucked...and super stupid. 'Merica.