Did more digging today. There are other loans I don't know about. Maybe XH isn't the culprit after all.
In 30 days, I'll have that credit report, and can get to the bottom of this crap.
Hope there isn't too much and it is your X. It's so hard to resolve identity theft issues, especially when you can't find the perpetrator.