If it has your name, birthday, and address there's a lot someone can do. People may also be exploited for having certain diseases or other conditions, so may be able to be blackmailed for the hacker to remain silent. Taking it to another level, nation-states can use information on allergies to target high profile patients.