Old Navy / Afterpay -weird scam?

An adult son received fraudulent emails in the user's name confirming an Old Navy order and Afterpay account. The user is concerned about potential identity theft and is considering a credit freeze. Afterpay confirmed no SSN was provided, but the user suspects their SSN may be compromised.