That's why I believe the whole creditcard system in the US is a freaking joke. Even with all of this information, it still shouldn't have been possible to abuse it, as long as you don't physically possess the creditcard and you don't know the PIN, that's how it works over here in The Netherlands.