Identity theft losses grow, Web a small factor