I mean, it sucks, but it's not catastrophical. Get a new debit card and be ready to de-subscribe from new email newsletters. As long as you don't fall for fishing, there's not that much they can do against you. Without access to your phone/email, they won't be able to commit identity theft.