This story underlines the warnings about what private information you should give to merchants and others. Identity theft requires little more than a name, address, and social security number.