Susan had no idea what she was getting when she signed up for identity theft protection