Now he should be worry about his Identity Theft because his Date of Birth is on PP and thief got SS card too. A lot new credit card will be issued under his name.
Report it , they will block for 90 days and will be extended.

https://www.aol.com/article/finance/2016/08/10/5-things-you-should-never-keep-in-your-wallet/21448846/