Someone should clarify if this
- leaks only the cc number (as shown here)
- or otherises a payment
Contactless payments use the EMV protocol. Leaking the cc number is bad, but happens all the time. An actual payment athorisation replaces both PIN and signature. The victim's bank will argue that the victim authorised the transaction at the POS.