Physical Access Control Systems (PACS) continually evolve as vulnerabilities are identified. It is no exaggeration to say most RFID cards used for access at office buildings, data centers, factories, and government buildings are susceptible to card cloning or hacking.
Card cloning devices can be obtained online for as little as US$ 10. The battle is ongoing and is relatively cost-effective to put right.