Not much they can do with it while SR is down. What they are waiting for is SR to be up. then they will have a hey day with all the usernames and passwords. So, if you did fall to their scam, the second you can log into SRM change your password aSAP...