This article really nails the problem with exposed names, phone numbers, email addresses and other PII. Bad actors are building "Starter Kits" to identity theft and other malicious activities with this level of data. 

IDTheft solutions and cyber insurance are fast becoming a necessary (and soon, default) requirement.