Ouch, that's a pain in the ass. On the bright side, all the money should be returned.

Be glad they only stole a debit card; my father had his identity stolen once and that was a royal pain in the ass to get straight. It's not nearly as horrible as the popular press makes it out to be, but you end up having to track down a whole bunch of loose ends.