The scenario describes the unauthorized use of Susan's personally identifiable information (PII) to open financial accounts. This is the specific definition of financial identity theft, a crime where an imposter obtains and uses a victim's personal data, in a fraudulent manner, typically for economic gain. The opening of new credit cards without the victim's knowledge or consent is a classic manifestation of this crime. The other options represent either different types of crimes or the tools/methods used to perpetrate a crime, not the crime itself as described.

B. SQL injection: This is a specific type of web application attack used to compromise a database; it is a method, not the resulting crime of identity fraud.

C. Cyberstalking: This crime involves online harassment, intimidation, or threats directed at an individual, which is not what occurred in this scenario.

D. Malware: This refers to malicious software. While malware could be a tool used to steal the PII needed for identity theft, it is not the crime itself.

---

1. U.S. Department of Justice, Criminal Division. (n.d.). Identity Theft and Identity Fraud. This official source defines identity theft as a crime in which an imposter obtains key pieces of personally identifiable information, such as Social Security or driver’s license numbers, in order to impersonate someone else. The fraudulent opening of credit accounts is listed as a primary example. (See Section: "Identity Theft and Identity Fraud").

2. Holt, T. J., Bossler, A. M., & Seigfried-Spellar, K. C. (2018). Cybercrime and Digital Forensics: An Introduction (2nd ed.). Routledge. Chapter 7, "Identity Theft and Fraud," explicitly details how offenders use stolen PII to apply for and obtain credit cards in a victim's name, classifying this act as financial identity theft.

3. National Institute of Standards and Technology (NIST). (2017). NIST Special Publication 800-63-3: Digital Identity Guidelines. Section 5.1, "Threats," discusses the threat of an attacker successfully authenticating as a subscriber (the victim). This document frames identity theft as a primary threat that digital identity systems must mitigate, where an attacker "masquerades as the subscriber to fraudulently obtain goods or services." (DOI: https://doi.org/10.6028/NIST.SP.800-63-3)