There is no general statute to prevent harassment, but if the individual is accessing banking or financial information without information, or is threatening you with physical harm, or is publishing false statements about you (defamation/libel), you can sue them for it.
Having a defendant that is living out of state is going to make things more complicated, but it is still possible to sue them in your home state as that is where the injury is occurring.
The defendant's employer is responsible for the employee's behavior if it is within the scope of his employment (not likely), or if they are not maintaining appropriate security of their customer's data, they can be held liable.
You can try retaining a lawyer to write a demand letter on your behalf (often that is a good cost-effective and quick mechanism to resolve a dispute like this short of going to court).
You can still try filing the complaint with IC3, as well as filing a complaint with local law enforcement (while they may not be ideally suited to resolve this matter, the worst that happens is that they tell you they are unable to pursue the case as it is a civil matter and not a criminal one, and you will have to use the above remedies).