An old user was apparently able to get a look into a newly-acquired credit card customer's details because of the wrongful mapping, but the reverse was not possible.