Made a booking via phone today with UA and did not receive the expected confirmation email. Called them back and asked them to verify the email address I had given them, and they provided someone else's email, not even remotely close to mine. They assured me that my credit card info was not on the message they had sent out, but there is a lot of info there - name, flight dates, last four of the credit card, PNR, etc.

I'm a little bit concerned that they sent all of this personal info to someone else, but maybe I'm over-reacting. Would anyone else be concerned?