Here is Apple’s guidance for stolen phones→If your iPhone, iPad, or iPod touch is lost or stolen - Apple Support.
If the phone had a passcode on it and the thief does not know the passcode your content is safe. If you had Find My enabled on the phone your Apple ID/iCloud content is safe.
Beware of a common phishing scam: You may get a text or email from “Apple” or “Apple Security” (or sometimes “Police”) saying your phone has been found and to click on a link to see its location. This is NEVER from Apple or from law enforcement; it is from the thief or fence to steal your Apple ID and identity. Delete any such message without responding to it. Apple never gets involved in lost or stolen devices→Avoid phishing emails, fake ‘virus‘ alerts, phony support calls, and other scams