This comes from IDNotify, an extra service you might have signed up for with a Turbotax bundle. Log into your account there for more details.
In general, I think most people have at least some personal info exposed, and should take steps to protect their credit and identity even if they haven't been personally attacked yet (especially if you haven't been attacked yet.)
You can pay for credit monitoring but that is probably more than most people need to do. I have placed either a lock or a freeze on my credit files (prevents most attempts to take out new loans in my name) and I have credit cards that provide credit monitoring -- they will tell me if my score decreases and I can go look why that might be. You want to make sure you use secure passwords on your banking sites and don't re-use passwords--if someone cracks a low security site like a fan web site you comment on, you don't want that password to also work on high security sites like banks and investments. You can also turn on two-factor authentication when available
