WGXC-90.7 FM

Audit finds Thruway Authority lacking in credit card security

Oct 04, 2017 7:00 am

Richard Moody is reporting for Columbia-Greene Media the office of New York State Comptroller Thomas DiNapoli Tue., Oct. 3, released a report, which found that the state Thruway Authority lacks the security required to protect credit card data. According to the audit, the authority does not have updated security measures for credit card data and does not meet state security standards, which puts motorists who pay tolls or E-Z Pass charges on their credit cards at risk. From March 1 through June 5, the authority directly processed approximately 66,000 credit card transactions totaling more than $1.4 million. The authority accepts in-person credit card payments for E-Z Pass tags. It also takes payments over the phone or online for unpaid tolls, accident reports, oversized truck permits, commercial accounts and other costs. The audit found the authority is not in compliance with State Data Security Standards, identified weaknesses in its security systems protecting cardholders’ data and also noted management was unaware of the security weaknesses. In its response, the authority generally dismissed the concerns and recommendations contained in the audit, saying it was already in the process of implementing the items on the comptroller’s list of recommendations. Read the full story at HudsonValley360 [dot] com.