Texas Department of Transportation hacked, 300,000 car crash reports stolen

The Texas Department of Transportation (TxDOT) disclosed a major data breach during which nearly 300,000 crash reports containing sensitive private information were exfiltrated.

Drivers in Texas who recently had a car accident should be aware that hackers might have obtained their sensitive private data.

It includes first and last name, mailing and physical addresses, driver’s license numbers, license plate number, vehicle make and model, car insurance policy number, and other information, such as injuries they may‘ve sustained, and a narrative description of the crash.

On May 12th, 2025, hackers gained access to a Crash Records Information System (CRIS), which includes the details regarding traffic crashes and the individuals involved.

“TxDOT identified unusual activity in the CRIS originating from a system account. Further investigation revealed this individual’s account was compromised and used to improperly access and download crash reports,” a letter to affected individuals reads.

The investigation revealed that hackers accessed and downloaded “nearly 300,000 crash reports” before TxDOT disabled access from the compromised account.

TxDOT is working on notifying affected drivers and is also implementing additional security measures for accounts to help prevent similar incidents in the future.

The department advises people affected by the data breach to be vigilant regarding emails or text messages related to crash information.

“Do not provide anyone with your personal information, including Social Security number, bank account information, or anything else,” the letter warns.

Additionally, TxDOT recommends the following steps to monitor credit reports, consider freezing credit, file taxes promptly, and ask credit reporting agencies to put a fraud alert on the credit report.