I’m not from the US, so I’m not as familiar with the identity or financial stuff.
It sucks that you were compromised by something you were mostly stuck using and don’t have much control over.
Seems like you have a pretty good plan and idea of what you’re doing overall.