...ok here's one I thought I would ask.
With everything being micro chipped and all, wouldn't that expose the Guests personal information to thieves??

(the idea of people scanning - like they do with credit cards that have been mico-chipped).
and what is the Disney Corp doing to prevent things like this from happening??
T.T.F.N.
There is no personal information about you on a MagicBand, or the RFID cards. They are not programmable like that.
Each one has a unique ID. In some situations, they may have several for added security and reliability. So if I get your MagicBand ID, all I have is a long string of numbers. This is actually NO DIFFERENT that before with the tickets/KTTW cards. The only difference is that they can be read from a distance, albeit a relatively short one.
That ID is a "key" to an entry in a database. When you scan your card/band, the local "computer" will make a connection to the database and get the relevant info - at a turnstile/entrance, it determines if there is a valid admission entitlement for that park, etc. At a FP+ touchpoint, it determines if you have an active FP+ window for that attraction. At a point of purchase (POP), it determines if you have a valid account for charging, etc. For a thief to do anything major, they'd need access to the database as well. Then again, if they have access to the database, they really don't need anything else. We'd all be doomed.
That said, there are some valid security concerns to be aware of, at least, that do not require direct access to Disney's Database of Everything. How concerning they are is up to you.
Note that when I say "card/band" below, I mean either the physical card or MagicBand, or a "duplicated" one gained by "skimming" the ID off yours without you knowing.
Name visibility, perhaps more of a concern with children:
- If you customize the MagicBand, you are offered the ability to put a name on the inside of the band (only up to ~11 chars I think). If someone gets hold of the band, they know your first name, or whatever it is you put on there.
- I understand that the CMs screen at the FP+ terminals also display your name - not sure if it is just first name, or full name. Not aware of any other information at this time. But someone could see it.
Purchases:
- Disney originally planned that POP touchpoint sales under $50 would not require a PIN. After initial testing, they decided to implement a PIN on all purchases. Until then, someone with your card/band off of it and duplicated it could theoretically go on a sub-$50-per-purchase spending spree on your account.
Use of entitlements:
- Of course, someone with your card/band could potentially use your FP+ experiences. They'd have to know when they are valid, and use them before you. Not certain how readily they can get that info from a kiosk or a CM.
Access to resort room:
- If they have your card/band, AND knew what resort and what room you were staying at, they could potentially access your room. No different than getting hold of a KTTW card before.
Access to more personal information:
- Speaking of kiosks, I haven't seen/heard specifically how easily information can be called up on them without providing additional authentication info (like your DMX account/password).
Active transmitter in MagicBands:
- The MagicBands have an "active RFID" transmitter, which broadcasts the ID for a bit of a longer distance than the usual passive units (which can generally only be read at a few centimeters in most cases). The battery and transmit power rates it at less than 15 feet. But this makes it easier to get that ID. What the active ID gets you is uncertain, other than certain planned but unspecified "experiences", the common example of which is that at a meet and greet the character will know your name before you approach (via the aforementioned database access, likely provided by a screen that the handler has). It is very likely this ID is separate than the passive chip IDs for security reasons.
Disney also plans to use that transmitter for crowd handling, by being able to track guests through particular choke points.