For additional context most manufacturers state the longest you can read passive EPC Gen 2 tags is about 30 feet. We were able to build a device that allowed reads at over 200 feet and could have easily done more.
EPC Gen 2 was designed to be an efficient, cheap Tag for inventory management and not used in secure applications. Anywhere you see it being used for something secure - it can almost certainly be broken.
I’ll be releasing the specs for the platform we built at a talk soon, so that everyone can start pentesting EPC Gen 2 tags for cheap.