he is because once scammers know their victims' names and e-mail addresses, along with the companies that they do business with, they can craft very targeted "spear-phishing e-mail attacks that try to trick victims into revealing more sensitive information such as passwords or account numbers.