Online security flaw put Express Pass information at risk

Wednesday , November 08, 2017 - 1:36 PM

Associated Press

SALT LAKE CITY (AP) — The personal information of people who pay to use Utah express lanes was discovered to be at risk after a resident uncovered an online security flaw.

Deseret News reports that names, addresses and credit card details were found to be unsecured on the third-party website that manages the accounts of Express Pass customers.

RELATED: UDOT considers doubling or tripling Express Lanes toll rates

Utah Department of Technology Services officials say the state requested the vendor to take down the website on Tuesday, and they're investigating the cause and extent of the problem.

The agency has not yet determined if the customers' information was compromised. There are 16,000 active pass users and up to 5,000 non-active users.

Information technology professional Tyler Fitts found the flaw. He says accessing the information took no more than a basic skill level.

RELATED: Express Lane rate hike approved by commission, proposal now goes to legislature

Sign up for e-mail news updates.

×