Your name and address are two of the most important bits of data a hacker would need to steal your identity. The only other vital piece of data they would need is your SS# and they could obtain that easily enough by creating a fake ID, going to their local Social Security office, claim they lost their SS card and ask for a replacement. Same thing with credit card info. The article says hackers can only steal your account info. Okay, what information do you have to provide to set up your account to begin with? The same personal info stored on your DL; name, address, etc. I really doubt the physical description info matters that much to the hackers, since they could just take your name and info and get a new DL with their picture (and physical data) on it. Oh...one other thing your credit card or debit card account will have that your DL does not....your email address. Now the hacker try to hack and read your emails as well. The article attempts to make a BIG distinction between credit card fraud and identity theft. I agree that identity theft can be far more damaging, but I do NOT agree that hacking your DL info is the only way that could happen. I would guess the vast majority of identity theft still occurs based on data obtained from credit card information rather than DL info, because both store the same personal information about the holder (with the possible exception of SS# on the DL). As for which of the two is more difficult repair, that's really hard to say. Debit card info can allow the hacker to wipe out your entire bank account, leaving you no money at all to pay for getting the damage repaired. While their are legal limits to how much you can be held liable for with credit card fraud, that only applies AFTER you have convinced the credit card company you really did lose your cards. Until then, you are responsible for ALL charges being made. When I worked for the home health company, one of my patients was going through that very process. His cards had been stolen and he was having to make dozens of calls every day to finance companies, vendors, retailers and the banks trying to (a) establish the fact his cards HAD been stolen and (b) be released from responsibility for the charges that had been made. It took him over a month before he finally got it straightened out. On the flip side of that, I actually had a former supervisor "steal" my identity. We had the same name, so that part was easy. He also had my address and other personal info from my application. A few months after he left that job and moved out of state, I began getting collection calls from all kinds of places; a local furniture store, insurance companies, different banks and even a car dealership in the next state. Apparently, this guy went on a spending spree and kept using MY address and phone number. Fortunately, I never had to actually pay any of the charges he ran up, but it took about 6 months before I stopped getting calls. This was in the early 90's, so the internet was still fairly new. While I didn't have to pay any money for his escapades, I have no idea how it might have affected my credit score because there was no way for me to check on that at the time. Overall, their was no real damage done, but it could have gotten very bad if he had been more malicious.