It's funny that no one talks about credit card companies actually selling personal data to the highest bidder:
http://www.businessinsider.com/credit-cards-sell-purchase-da...
Not very hard to deanonymize a person's every card purchase.
Not very hard to deanonymize a person's every card purchase.
Edit: (I mean from publicly available data, didn't realize how ambiguous that was until I reread it)
So anything you could buy would be fine, but no stealing or fraud.