Making a profit from stolen data depends on the data type. Personally Identifiable Information (PII) is any information that can be used to identify a person.
The VikingCloud infographic below identifies types of PII, how cybercriminals use it, and how organizations should protect it.