A Melbourne schoolboy has exposed a security flaw in the website of Public Transport Victoria (PTV), the government authority that provides details about train, bus and trams.
Joshua Rogers, 16, says he found the database of people who used the old Metlink online store by chance.
The database includes names, phone numbers and credit cards.
The teenager says he stumbled across the problem while browsing the website.
View the full story
Is Metlink the same as the myki database?