Identity theft occurs when someone unlawfully obtains and uses another person's personal data, typically for financial gain or to commit fraud. It can have severe consequences for victims, including financial loss and damage to their credit reputation.