"The state Thruway Authority does not have updated security measures for credit card data and does not meet state security standards, which puts motorists who pay tolls or E-Z Pass charges on their credit cards at risk, according to findings from an audit released Tuesday by state Comptroller Thomas DiNapoli."

"The audit looked at compliance with Payment Card Industry Data Security Standards from March 1 through June 5.

"During that time, the authority directly processed approximately 66,000 credit card transactions totaling more than $1.4 million, according to the audit."