Consider the following statements regarding Section 66C (Identity Theft) of the IT Act, 2000: Statement 1: Identity theft covers using another person's identity without authorization through computer resources. Statement 2: Punishment for identity theft can extend to 3 years imprisonment. Statement 3: Using another person's photograph digitally without consent constitutes identity theft. Statement 4: Identity theft is punishable only if it results in financial loss to the victim. Which statements are correct?