[taoistextremist]

How useful is the info gathered from an attack like this? Does it depend on the specific method (e.g., contactless card versus something like Google Pay) how compromising the information is? I was under the impression that by having virtual cards and the service itself to contact, Google Pay had something of a buffer from attacks like this.

[londons_explore]

The privacy angle is only part of it - the other part is someone else spending my money, and they can do that just as easily with something like Google Pay.

[taoistextremist]

Well, only if you unlock your phone, too.