Texas vendor breach exposes personal data of more than 3 million people
A data breach involving a vendor used by the Texas Parks and Wildlife Department (TPWD) has exposed the personal information of more than 3 million people, according to state officials. The compromised data may include names, addresses, and government-issued ID details such as driver’s license numbers.
Texas car plate. Photo by Spencer Platt/Getty Images.
A data breach involving a vendor used by the Texas Parks and Wildlife Department (TPWD) has exposed the personal information of more than 3 million people, according to state officials. The compromised data may include names, addresses, and government-issued ID details such as driver’s license numbers.
- A data breach involving a vendor used by the Texas Parks and Wildlife Department has exposed information on more than 3 million people.
- The compromised data may include names, addresses, government IDs, and driver’s licence details, with some reports also indicating possible vehicle-related information.
- Officials say the breach stems from a third-party system used to manage hunting and fishing licences.
- Authorities are urging affected individuals to monitor for fraud while the investigation continues.
Cybercriminals keep demonstrating that entrusting personal data to governments is an increasingly risky business. This time, more than 3 million people in Texas were affected as TPWD’s vendor suffered a database breach.
According to the website of the Office of the Attorney General of Texas, sensitive data, such as names, addresses, Social Security numbers, driver's license numbers, government-issued ID numbers, and dates of birth, was stolen.
Contrary to the information above, the TPWD claims that Social Security numbers and dates of birth "were not obtained from this incident," while also adding that financial information, including credit card details, was not affected.
Nevertheless, the department corroborated that the criminals "may have obtained" driver's license information, passport numbers, email addresses, phone numbers, and residential addresses for more than 3 million Texas hunting and fishing license customers, including some members of the department's staff.
"There is no evidence that customers under the age of 18 were involved or that any specific group was targeted," they added.
Per the TPWD statement, the incident involved an unspecified license system vendor that handles the sale of hunting and fishing licenses. Now, the department claims that new safeguards and monitoring services are being implemented.
It's not clear when the incident happened, but TPWD was notified by Texas Cyber Command on May 13th, 2026.
As a precaution, the department also suggests that affected individuals sign up for one year of free credit monitoring.
"Actively monitor for the possibility of fraud and identity theft by reviewing your credit report and financial statements for any unauthorized activity. If you notice any unauthorized activity, you should immediately notify the relevant financial institution or credit bureau reporting the activity," they said.
Unlock more exclusive Cybernews content on YouTube.