I don't have any experience with locking credit reports or identity protection services, but it can't hurt to take some basic cybersecurity precautions.
Use unique, strong passwords for every website, never share them (this is why I'll never use Plaid), and activate 2FA or MFA when possible. The reason for unique passwords is because if hackers get your email and password from one site, they'll try it on dozens of other sites. This can lead to a cascade of hacks. Strong mostly means long -- a few more characters in length is more important than a random set of upper and lower case, numbers, and special characters. A common tip these days is to use a passphrase instead of a password, which is a set of random words mashed together. That allows relatively easy to remember, but cryptographically strong passwords. But make them random -- nothing that would show up in online profiles or social media, like mother's maiden names, grandson's names, birthdates, or favorite books. Perhaps the best solution is to use a password manager, so you only have to remember one password. But don't let browsers save your passwords -- browsers are major targets for malware, keyloggers, and other hacks. Two-factor or multi-factor authentication is probably overkill for trucking sites, but should be the default for anything critical. It's designed to keep hackers locked out, even if your login and password are compromised.
Email should be your most secure account, then financial accounts. This is because email is used for password resets and 2FA/MFA, and thus can be used to unlock other accounts. It's estimated that 80% of corporate hacks start with an email, so get in the habit of never (ever) clicking on a link in an email. If you get an urgent email warning of some kind, say from your bank, don't click. Call them, open their app, or open a web browser on your own and go to their website, and verify it in a way that's completely independent of the email.
Online, web skimmers are a real danger. They're malware inserted into a ecommerce site that captures your credit card information. So limit the number of sites with your credit card information. Using something like virtual cards (Cap1 or Citi) or PayPal that allows you to pay without giving them your card information directly. Go back and delete your credit cards from sites you no longer use.
