TxTag payment security concerns arise as contractor loses compliance

After days of hearing management at the Texas Department of Transportation discuss potential concerns with the security of millions of tollway customers’ private information, one employee said he’s not pleased with how the state is handling it.

The whistleblower said he felt compelled to reach out to KXAN after seeing our reports of nearly $1 billion in late fees added to 2.2 million driver accounts as well as concerns with improper billing at TxTag, a system used by millions of drivers across the state.

“TxDOT’s toll contractor Conduent has lost PCI [payment card industry] compliance certification,” said the tipster, whose employment KXAN verified using state records. “This is required to take credit card payments. Yet they continue to process credit card payments and the agency is not holding them accountable for this contract breach.”

PCI compliance is the standard used by the five major credit card companies – Visa, Mastercard, Discover, American Express and JCB – to process and store customers card information and ensure transactions are secure and safe from hacking or data breaches.