I think that's almost impossible. Credit cards incorporate a check digit, which means that changing one number will almost certainly result in an invalid number, and that cards aren't issued sequentially. Also, I believe united.com should verify both the name and zip code on the card, as well as the security code. Something certainly went awry, but I doubt anyone has been charged.