What is the priority for addressing credit card application identity theft made in my name?

A "friend", who used to be my boss with access to my ss# and po box address, recently applied for two (2) credit cards in my name. One of the credit card companies – thankfully – called me to verify the application, which I immediately rejected as something I had initiated. When confronted, the individual admitted his actions to me and when asked why he would do such a thing and not mention it to me, stated that he "wanted to help me improve my credit rating". I responded that I already enjoy an excellent 800 credit score and did not need his help. Nevermind all that, I said, you didn't have any authority to submit these fraudulent applications in my name, regardless. His two (2) applications in my name resulted in two "hits" to my credit score. Pissed.