Yup. There's ample data from metrocards and security cameras to follow his route. The more difficult challenge would be finding everyone he had come in contact with on those trains since data granularity of which cars he took would likely be unspecific.
