Security flaw may have exposed personal info on 21,000 Utah Express Pass users

SALT LAKE CITY — A vigilant UDOT Express Pass customer discovered a glaring security breach in the third-party website that manages pass accounts, but state officials don't yet know if the personal information of approximately 21,000 current and former customers has been compromised.
That information on customers who have purchased passes for accessing HOV lanes includes names and addresses, phone numbers, and credit card information — including the last four digits of account number