US-CERT, Preventing and Responding to Identity Theft (Security Tip ST05-019) (Sept. 17, 2008) (full-text).