A Credit Freeze May Not Prevent Identity Theft