Criminals obtain personal information in many ways. These include from a lost/stolen purse or wallet, buying it on the dark net, unsecured mail or documents in the home, phishing schemes (phone or email), data breaches, and obtaining access to personal information via banks, retailers, companies you do business with, your employer, hospitals, clinics, nursing homes, schools, government offices, etc.