After the Identity Hack: What to do?