Even simple purchases online, like buying tickets to a concert, can lead to identity theft.