The consequences of wrongful access to personal information can be devastating, and they go beyond the money victims lose to identify thieves. The more than 9 million annual identity theft victims spend an average of 600 hours over two to four years and $1,400 to clear their names (V. Johnson 2005, 257, n. 7). Victims may also lose job opportunities; be refused loans, education, housing, or cars; and be arrested for crimes they didn't commit. In extreme cases, victims are blackmailed.