File a report immrdiately at your local police station and then notify the 3 major credit reporting agencies to place a "fraud alert" on your account. This will not interfere with your regular use of all of your credit cards but it will prevent someone from opening up a new account in your name, and help deter crooks from obtaining medical or hospital care, or telephone or cable service. and even a drivers licence in your name. It will also stop companies from sending you balance transfer offers, usually with blank checks enclosed, that can be intercepted from the mail.
I have a close friend who has been "going through hell" for 16 years with this type of nonsense. It appears that when she used a credit card at a gas pump in Florida, some illegal device copied her information and soon thereafter, fraudulent charges appeared all over Florida. (She lives in New York and was in Florida for only one week, ever). The problem continues to this date. Every few years, she receives collection letters for telephone service and cable tv service which was ordered in her name in Florida (but not on any credit card she owns now). The people would pay with a check or cash to begin the service and then fail to pay the bills. One phone company had even obtained a court judgment against my friend in Florida, which required tons of paperwork to vacate.
Each incident requires her to fill out a multi page identity theft report, which needs to be notarized, obtain a police report from her local police, and return it to the cable or phone company or doctor or hospital with several documents proving she was living in New York during the time the service was rendered in Florida. It's possible someone may be driving around with a license in her name. One was shown as proof of identity when one cable service account was set up. They did not make a copy of it nor enter the license number into her account. They now keep copies. The police tell my friend that they cannot locate any license in her name, other than her real one, so the crooks probably showed a phony one.
She has to keep a fraud alert on her credit reports. The damn credit bureaus require her to renew it every 3 months. The procedure for having a "permanent" fraud alert, which lasts for 7 years, is very tedious but she is in the process of doing it now.
Bottom line, place the fraud alerts immediately and renew them every 3 months for a year or two. This should cause the crooks to "give up" on your info and stop using it and spreading it around to other creeps. Once it gets out there, it can cause you major grief. My friend is in the process of obtaining a new Social Security card because the illegal use of her info has been so rampant. The police told her that had she placed fraud alerts on her reports when it first began, the crooks probably would have discarded her info and moved on to another victim.
It's a huge problem nationwide. By the way, for those of you who do not know this, when merchandise is purchased with your info, it's the store that takes the financial hit, not the credit card company. These losses run in the billions each year and ultimately we pay for them via higher prices the merchants must charge to offset the losses.