They might get credit card information but that's pretty doubtful. I think their best bet is going to be getting peoples XBox Live accounts and Playstation network accounts. I guess with that account information they can access those accounts and perhaps get credit card information, but really that's about it.
Of course this is on the really optimistic notion that they get anything useful at all. I would be outraged if I didn't think this was the stupidest thing in the world, and possibly the biggest waste of time for the US military.