He meant, it could have been worse. They could have changed your details. The phone number associated with your account, for example. Or they could have added transactions.