All sorts of personal data can be collected. Frequently, phishers are looking for names, birthdates, Social Security numbers, phone numbers, passwords, password hints, credit card numbers, banking credentials, and any other useful sensitive information.