Target selection. They now know who has insurance and can target them specifically.
And then?
Spear-phishing, to start with.