Someone has access to my TransUnion account?

Hi everyone, I was recently a victim of identity theft, and I've successfully frozen my Equifax credit (Québec resident). The same can't be said for TransUnion. The ID thief has changed my address out of the province, and so I disputed the address with TransUnion and provided the necessary documents. That was yesterday. Today I see a new, separate address was added which I had to re-dispute. I reset my password, and tomorrow will check for any changes. My worry is that someone was able to change my address yesterday after I already disputed the previous one. I'm trying to get my address fixed so that I can place a freeze on my credit.

I noticed some activity from a credit Karma account, which I am actively trying to cancel. Could they really change my address like that through credit Karma? Any advice would be greatly appreciated.