Even if "Darren" didn't work there, GAI is still responsible, since you certainly did not give them permission to give your card to a non-GAI employee.