There is an attack on chip-and-PIN cards when the ATM system hasn't been upgraded to chip cards. The problem is that the PIN for chip-and-PIN is same as for ATM withdrawals. The terminal also gets enough information from chip cards to clone the magnetic strip. The result is that compromised terminal can produce cloned cards that can be used to withdraw cash from ATMs.