Yes. Hackers will used data collected by spyware to, for example, deliver phishing or spoofing campaigns or perpetrate identity theft scams.