New York’s Metropolitan Transportation Authority (MTA) has disabled a feature associated with its contactless payment system for the city’s subway system, following a report showing how easily someone could abuse it to access another individual’s trip history for the prior seven days. The report by 404 Media described how anyone with access to a credit card number that another individual might have used to tap-and-pay for subway rides could then use the card to track the individual’s movement on the subway system.

Source: Dark Reading: Cloud