<prompt> Human: Last weekend I noticed 4 charges on my Chase credit card this one for around 340 and 2 for around 50, from American Airlines. I only use this card for travel, hold a 0 balance, and frequently keep tabs on my finances and was able to catch this shortly after the purchases were made. I promptly called Chase, explained that these charges werent made by me, and was transferred to their fraud department. That conversation was interesting. After repeating the story to the new voice over the phone, the representative listed two names withheld for privacy despite their fraud and asked me if I knew them. I did not know them, and I asked him why he was asking me this. He told me that those were the names of the two passengers that took the flight, which was on the previous day. He also knew that that flight was from El Paso to LAX and that my credit card information was entered manually and not swiped. I asked him how he knew the names and he told me more or less theres a tab on the screen Im looking at. It immediately occurred to me how inappropriate it seemed that he 1 knew this information and 2 offered it right up to me. Unfortunately, I did not think to challenge him at that moment.So it has me here asking you what kind of information credit card companies have about our purchases and what rules are in place protecting that information from being shared. If those purchases are legitimate, what safeguards are in place that prevent these companies from sharing that information? I was surprised that Chase was able to determine the information about these purchases that quickly but were unable to prevent them from being made, and I was much more surprised that it was provided to me without solicitation. Excluding the fact that American Airlines didnt vet the purchasers of this flight and that I called Chase about it and not the other way around, the process finalized appropriately with a full refund and a new card in the mail.  <response>: Flight info is normally given in the purchase.Basically, credit card companies are supposed to receive an itemized receipt for everything.They gave you the information because they probably verified you as the owner of the account.And your card holders agreement also put talked about how they may share information about you with partners. 