Strategies for addressing identity data breaches should shift from post-incident remediation to pre-incident prevention and reducing data value, including promoting cryptography-based dynamic verification.