Your Social Security Number Was Stolen by a TWRA Agent — Here's What Happens Next

If a Tennessee Wildlife Resources Agency (TWRA) license agent obtained your Social Security number without permission or used it fraudulently, you are dealing with identity theft by a government employee. This is a crime, and the steps you take in the first few days matter — you need to report it to law enforcement, place a fraud alert on your credit file, and monitor your accounts for unauthorized activity. The TWRA itself has an internal affairs process, but that handles the employee's conduct; you also need to protect yourself from the financial damage.

This situation is different from a data breach where a system was hacked. A person with a badge deliberately misused your information. That means there is a criminal case to file, and you have leverage to demand the agency take responsibility for the harm.

Key Takeaways

  • File a police report with the Tennessee Bureau of Investigation or your local police department within 24 hours, because law enforcement creates the official record that banks and credit bureaus will recognize.
  • Contact the three major credit bureaus (Equifax, Experian, TransUnion) and place a fraud alert on your file so new accounts cannot be opened in your name without verification.
  • File a report with the Federal Trade Commission at IdentityTheft.gov, which creates a recovery plan and gives you legal standing to dispute fraudulent accounts.
  • Report the TWRA agent to the agency's internal affairs division and to the Tennessee Attorney General's office, which oversees state employee misconduct.
  • Monitor your credit reports, bank statements, and tax records for the next year, because identity theft can surface months after the initial theft.

File a Police Report when ready

Contact the Tennessee Bureau of Investigation (TBI) or your local police department and report the theft as identity theft by a government employee. You need a written police report number because banks, credit bureaus, and the FTC all require it. Do not wait — the sooner the report is filed, the sooner law enforcement can begin investigating and the sooner you have an official record if the agent used your number to open accounts or file fraudulent tax returns.

When you call, tell them the agent's name, the date or approximate date you discovered the theft, and how you know the agent obtained your number (for example, you saw them write it down, they asked for it under false pretenses, or you found evidence they used it). Bring your driver's license and any documentation you have — emails, text messages, witness statements, or records showing the agent's access to your information. The police will give you a report number; keep this number in a safe place because you will need it for credit bureaus and the FTC.

Place a Fraud Alert and Consider a Credit Freeze

A fraud alert tells credit bureaus that you may be a victim of identity theft. When a fraud alert is active, lenders must verify your identity by phone before opening a new account in your name. Call one of the three major credit bureaus — Equifax, Experian, or TransUnion — and request a fraud alert. You only need to call one; that bureau will notify the other two automatically. The initial alert lasts one year and is free.

A credit freeze is stronger: it locks your credit file so that no one can open a new account without your explicit permission. You have to contact each bureau separately to place a freeze, but it is also free and lasts until you remove it. If you believe the agent may have already used your number to open accounts, a freeze is the better choice. You can place a freeze online, by phone, or by mail — each bureau's website has the option.

After you place the alert or freeze, request a free copy of your credit report from each bureau at AnnualCreditReport.com. Review it for accounts you do not recognize. If you find fraudulent accounts, dispute them with the bureau in writing and include your police report number.

File an Identity Theft Report with the FTC

Go to IdentityTheft.gov and file a report. The FTC does not investigate individual cases, but the report creates an official record and generates a recovery plan tailored to your situation. The plan tells you which companies to contact, what letters to send, and what documents to keep. You will also receive an Identity Theft Report that you can show to banks and creditors as proof of the theft — this report carries legal weight and can help you dispute fraudulent accounts faster than a police report alone.

The FTC report is free and takes about 10 minutes. You will need your police report number. After you file, the FTC may send you follow-up information about steps to take, but the main value is the recovery plan and the official report itself.

Report the TWRA Agent to Internal Affairs and the Attorney General

Contact the TWRA's internal affairs division and file a complaint against the agent. You can reach TWRA through their main office in Nashville or through your regional office. Explain what happened, provide the agent's name and badge number if you have it, and include your police report number. The agency will investigate whether the agent violated conduct policies and may discipline or terminate them.

Also file a complaint with the Tennessee Attorney General's office, which oversees state employee misconduct and has authority to pursue civil or criminal charges against the employee. You can file online through the Attorney General's website or by mail. Include the same information: the agent's name, what they did, when it happened, and your police report number. The Attorney General's office may coordinate with law enforcement or pursue the case independently.

Monitor Your Accounts and Records for Fraud

Check your bank and credit card statements weekly for the next several months. Look for charges you did not make or accounts you do not recognize. If you find fraud, contact your bank or credit card company when ready and report it as unauthorized. Most banks will reverse fraudulent charges within 10 business days if you report them promptly.

Also monitor your tax records. Identity thieves sometimes file false tax returns using stolen Social Security numbers to claim refunds. You can create an account at IRS.gov and check your tax transcript to see if anyone filed a return under your number. If you find a fraudulent return, contact the IRS Identity Theft hotline at 1-800-908-4490 and file Form 14039, Identity Theft Affidavit. Keep checking your credit reports every few months for at least a year, because identity theft can surface long after the initial theft.

Understand Your Rights Against the State

Tennessee law holds state agencies responsible for employee misconduct that causes harm. If the TWRA agent's theft resulted in financial damage — fraudulent accounts, damaged credit, costs to dispute accounts — you may have grounds to file a claim against the state. You will need to file a notice of claim with the Tennessee Claims Commission within one year of discovering the theft. Include your police report number, documentation of the harm (credit reports showing fraudulent accounts, bank statements showing unauthorized charges, receipts for costs you incurred), and a description of what the agent did.

The Claims Commission will review your claim and may award compensation for documented losses. This is a civil process separate from the criminal investigation. An attorney who handles government liability claims can advise you on whether your case is strong and what damages you can recover.

Frequently Asked Questions

How long does it take to recover from identity theft?

Recovery depends on how much damage was done. If the agent only obtained your number but did not use it, you may only need to monitor your accounts for a few months. If they opened accounts or filed fraudulent returns, recovery can take six months to a year or longer. Keep your fraud alert or freeze active for at least one year, and continue checking your credit reports regularly.

Can I sue the TWRA agent personally?

You can file a civil lawsuit against the agent for damages, but state employees often have immunity for actions taken in the course of their job. Your stronger claim is against the state itself through the Tennessee Claims Commission, which does not have the same immunity barriers. An attorney can advise you on both options.

What if the agent denies taking my Social Security number?

Your police report and any documentation you have (records showing they accessed your information, witness statements, or evidence they used your number) will support your case. The TBI or local police will investigate. If you have written proof — emails, text messages, or records from TWRA showing the agent requested your number — bring those to law enforcement and the Attorney General.

Should I change my Social Security number?

The Social Security Administration discourages changing your number because it can create more problems than it solves. A new number does not erase the old one's history, and you will have to update it everywhere. Focus instead on monitoring your accounts and using a fraud alert or freeze to prevent new accounts from being opened. Change your number only if the fraud is severe and ongoing despite your protective measures.

Do I need to hire an attorney?

You can handle the initial steps — police report, fraud alert, FTC report — on your own at no cost. If you want to pursue a claim against the state or sue the agent, an attorney who handles identity theft or government liability claims can advise you on whether you have a strong case and what compensation you might recover. Many offer free consultations.