Can a thief know my Apple ID without my PIN code?
Without your PIN, the thief should not be able to get any data from the phone. The ID in the phishing mail probably is just a wild guess, I got a few of those as well over the years.