User noticed that their TSA pass expired, and went to what they thought was a renewal site and entered:
- Passport number
- Drivers License number
- TSA number
- email address
Amex notified them that somebody was trying to charge $1500 - at which point they realized that they had gone to a forged site.
The pfishers have the above information. The card, naturally, has been cancelled.
The user is concerned about what the thieves can do with the numbers they collected.
Can the user do anything to protect their identity, and limit the 'damage' ?