Webroot uncovers thousands of stolen identities