You act as if there's some statutory damage to follow here. There's is not. That being the case, there's no other civil action here. His identity wa NOT stolen. It's not likely to be as the information was apparently sent to a trustworthy person. There's no damage. As I said back in reply #2 "woulda, coulda" is not actionable.
Let it go. You have no actionable claim. You are wasting your time and ours.

