That information, on it's own, can't really be used for anything. My guess is they harvest as much information as possible and then follow up months later with a phone call pretending to be from your bank. Using the little data they have they can probably convince you the call is legit.
Here's an example:
https://inews.co.uk/inews-lifestyle/money/sophisticated-cheque-scam/This, details can be used to pay into your account, but without passwords money cannot be withdrawn. Think about it logically, all this information is printed on every cheque you write (assuming you still use them).
As already said, its probably information they may use when trying to convince you they are your bank at a later date.
As banks tell you - JUST DON'T GIVE ANYONE YOUR PASSWORD- Tell them to fuck off.