I think they were testing specific compliance procedures in designing a new SAS! "Internal Control Procedures affecting safeguarding the shipping of critical records" and a related Managament Advisory - How to fire clerical staff that disregard Internal Control procedures when shipping critical records.
I guess the AICPA is paying for a years worth of credit monitoring. Effective after the 26th. I'm going to opt for just to be safe.