Texas Parks and Wildlife Data Breach Exposes Personal Information of 3 Million License Holders Texas Parks and Wildlife (TPWD) has notified over 3 million individuals that their personal data may have been compromised in a cybersecurity incident linked to the third-party vendor managing the state’s hunting and fishing license sales system. The breach was detected by Texas Cyber Command, which identified unauthorized access to customer profile information. Exposed data includes driver’s license details, passport numbers (for those who provided them), email addresses, phone numbers, and home addresses. However, Social Security numbers, birth dates, and financial information such as payment card details were not affected. TPWD confirmed that minors and specific demographic groups were not targeted, and no evidence suggests the breach was selective. In response, TPWD has strengthened data access protections and is collaborating with the vendor to implement additional security measures and monitoring. License sales remain unaffected, with operations continuing as planned for August and the upcoming license year. Affected individuals are eligible for a year of free identity monitoring through Kroll, with enrollment available until September 14. A dedicated support line (844) 959-7123 operates Monday through Friday, 8 a.m. to 5:30 p.m. CT. TPWD has also advised impacted customers to monitor credit reports, consider fraud alerts or credit freezes, and remain vigilant against potential scams.

Texas Parks and Wildlife Department Suffers Major Data Breach Affecting Over 3 Million A cyberattack on the Texas Parks and Wildlife Department (TPWD) has exposed the personal data of over 3 million Texans, marking one of the state’s largest breaches of the year. The incident, disclosed via the Texas attorney general’s website, compromised sensitive information, including names, addresses, driver’s license numbers, passport details, and government-issued IDs. According to TPWD’s statement, the breach originated from a third-party vendor handling hunting and fishing license sales. While Social Security numbers, birth dates, and financial data such as credit card details were reportedly unaffected, the exposed records include email addresses, phone numbers, and residential addresses. The department confirmed that no minors or specific groups were targeted, and there is no evidence of further misuse. TPWD’s investigation, led by Texas Cyber Command, revealed that the unauthorized access occurred through the vendor’s system. In response, the department has implemented additional security measures and monitoring services. License sales remain operational for August and the upcoming license year. Neither TPWD nor the attorney general’s office disclosed the identity of the threat actor or the attack vector. The department emphasized its commitment to strengthening safeguards to prevent future incidents.