Really, they aren't stealing an identity at all, they are simply stealing information about you. Saying that someone stole your identity because they know non-secret information about you is about as sensible as saying that someone stole your body when they stole a picture of you. If a bank accepts someone showing a picture of you as proof that they are you, they are simply being an idiot.