I very much doubt they did. What they did is read information from the card, which is it's very purpose. Then they wrote a card with their own information, and

I very much doubt they did. What they did is read information from the card, which is it's very purpose. Then they wrote a card with their own information, and signed it with an invalid key. I am not, as yet, terrified.