I recently learned that, without authentication, a bank card can send information such as: the card holder’s name, the expiration date, the last three transactions (or more depending on the model; this is used to allow payment and control in public transports).
All this can be done “contactless” for NFC cards.
I’m not sure the consequences on #privacy are widely understood.