Online security flaw put Express Pass information at risk
SALT LAKE CITY (AP) — The personal information of people who pay to use Utah express lanes was discovered to be at risk after a resident uncovered an online security flaw.
Deseret News reports that names, addresses and credit card details were found to be unsecured on the third-party website that manages the accounts of Express Pass customers.
Utah Department of Technology Services officials say the state requested the vendor to take down the website on Tuesday, and they’re investigating the cause and extent of the problem.
The agency has not yet determined if the customers’ information was compromised. There are 16,000 active pass users and up to 5,000 non-active users.
Information technology professional Tyler Fitts found the flaw. He says accessing the information took no more than a basic skill level.
Information from: Deseret News, http://www.deseretnews.com