'Is that even legal?': Companies may be sharing new credit or debit card information without you knowing | Open Awesome