By reading the encrypted data off of two cards and testing thousands of potential site codes against both cards until the decoded data displays a predictable interval between the two, he can find the site code and use it to create more card keys with a magnetizing device.
FORBES: Hacker Will Expose Potential Security Flaw In Four Million Hotel Room Keycard Locks