Even though the stolen information had no passwords, personal information, or card numbers, a different concern can still arise. Any phone numbers given out could be used by perpetrators in phishing attempts. They might pretend to be from Steam support and ask someone for their personal information. https://datalanix.com/blogs/is-the-steam-data-breach-story-fake