Yes, what your describing is illegal, and firstly I would contact all major credit card companies just to see if there has been any charges on the card that you did not make, if so cancel the card, in addition I would notify all credit bureaus of identity theft. I would also notify your local police department or a state or even government enforcement agency, give them as much detail to the crime. Many people think that identity theft is not a reportable scam and their alone but quite frankly that's not true.