Texas Hunting & Fishing License Breach Exposes Data of 3 Million Customers A cybersecurity incident affecting the Texas Parks and Wildlife Department’s (TPWD) vendor-run license sales platform has exposed sensitive personal data of over 3 million hunters and anglers. The breach, detected by Texas Cyber Command, compromised driver’s license numbers, passport numbers, residential addresses, phone numbers, and email addresses though Social Security numbers, credit cards, and financial data were not accessed. The vulnerability stems from a legacy system managed by an unnamed third-party vendor, later identified through public records as Gordon-Darby Inc. The company has operated the Texas License Connection platform (txfgsales.com) since 2013 under a $40.1 million contract awarded in 2012. The system, used by over 1,700 retail locations statewide, has remained in place for over a decade despite broader state modernization efforts, including the shift of boat registrations to the centralized TxT digital assistant. While TPWD confirmed no minors were affected and no specific group was targeted, the exposed data particularly government-issued ID numbers paired with home addresses poses significant risks for identity fraud, phishing, and account takeovers. Experts note that such information is highly valuable for attackers, as it can bypass verification systems across multiple platforms. TPWD is working with the vendor to implement "new safeguards and enhanced monitoring," though license sales remain unaffected for the upcoming August season. The incident underscores the risks of prolonged reliance on outdated vendor systems operating outside centralized state cybersecurity oversight. Affected individuals are advised to remain vigilant for suspicious communications referencing their personal details.