@Baleine already mentioned one. And it does not really matter what the can do specifically to you. It matters what they can do and that you have no control. If you want to know what people can do with just your username look at this project: https://github.com/sherlock-project/sherlock. Now imagine what someone with more data can do.