I think you misunderstand the trouble one can cause through limited information. We can phish, we can gain access to some personal information.

Both of those pots of "gold" are threatening enough attack vectors.