ok so help me take it one step further. Just having that stuff isn't the end game.
What do they do with it? Apply for credit? Take out a loan? Even if they had someones bank account login information, is it really easy to drain an account? My bank certainly doesn't allow an online transfer to another account or location.