You should have all three credit bureau LOCKED.

Use each site's fraud assistance program.

Transunion also allows an extended fraud alert (7 years) I didn't look at the others. https://www.transunion.com/fraud-vic...ce-fraud-alert

If they have her social, you should also probably contact the IRS. https://www.irs.gov/individuals/how-...fraud-activity

…suspect someone stole your identity and used your SSN for employment purposes or could use your SSN to file a tax return
Use Form 14039*

*Spanish version: Form 14039 (SP)
Complete the form online, print it and mail or fax to the appropriate office using the options listed on page 2 of the form. Include photocopies of at least one of the documents listed on the form to verify your identity. For additional information, refer to the Taxpayer Guide to Identity Theft