In a just world, companies such as this lender would not only lose the money they loaned, but would be liable for the vast amounts of time and grief they caused a completely unrelated individual.
Only then might we get a financial system which is robust against ID theft. While the costs are externalized to countless individuals, nothing will change.