With those login credentials ... Obtaining phone numbers and other metadata is probably enough to run social engineering attacks such as phishing, or even engage in identity theft. Cisco warned ...