New York State Comptroller Tom DiNapoli says the State Thruway Authority needs to take steps to protect credit card data.
The authority has payment card data for commercial truckers and many of its regular users, processing some 66,000 credit card transactions a year. An audit by the comptroller’s staff finds the authority hasn’t taken some critical steps to secure its network in this age of cyber attacks.
The comptroller says the Thruway Authority needs to classify its data and be aware how many of its systems process and store credit card data. It should do a risk assessment study on its systems and take steps to implement its findings.