The theft of names, addresses and phone numbers may seem less serious than stolen bank details, but cyber experts say AI is changing what criminals can do with that information.