Texas Parks and Wildlife Data Breach Exposes Personal Information of 3 Million License Holders Texas Parks and Wildlife (TPWD) has notified over 3 million individuals that their personal data may have been compromised in a cybersecurity incident linked to the third-party vendor managing the state’s hunting and fishing license sales system. The breach was detected by Texas Cyber Command, which identified unauthorized access to customer profile information. Exposed data includes driver’s license details, passport numbers (for those who provided them), email addresses, phone numbers, and home addresses. However, Social Security numbers, birth dates, and financial information such as payment card details were not affected. TPWD confirmed that minors and specific demographic groups were not targeted, and no evidence suggests the breach was selective. In response, TPWD has strengthened data access protections and is collaborating with the vendor to implement additional security measures and monitoring. License sales remain unaffected, with operations continuing as planned for August and the upcoming license year. Affected individuals are eligible for a year of free identity monitoring through Kroll, with enrollment available until September 14. A dedicated support line (844) 959-7123 operates Monday through Friday, 8 a.m. to 5:30 p.m. CT. TPWD has also advised impacted customers to monitor credit reports, consider fraud alerts or credit freezes, and remain vigilant against potential scams.

Texas Hunting & Fishing License Breach Exposes Data of 3 Million A cyberattack on a third-party vendor handling hunting and fishing license sales for the Texas Parks and Wildlife Department (TPWD) has potentially exposed the personal information of over 3 million license holders. The breach, detected on June 18, 2026, was disclosed by state officials following an investigation led by Texas Cyber Command, the state’s cybersecurity agency established in 2025. The compromised data includes driver’s license numbers, passport numbers (if provided), email addresses, phone numbers, and residential addresses. However, officials confirmed that Social Security numbers, dates of birth, financial information, and records belonging to minors were not accessed. The attack did not disrupt license sales, which will proceed as scheduled for the upcoming licensing year in August. TPWD has implemented enhanced security measures, including additional safeguards, monitoring services, and stronger access controls, in collaboration with the vendor. To mitigate risks for affected individuals, the agency is offering one year of free credit monitoring through Kroll, with enrollment open until September 14, 2026. The breach underscores the vulnerabilities posed by third-party vendors in government data systems. While no financial or highly sensitive personal data was exposed, the incident remains one of the largest reported data exposures in Texas this year due to the number of individuals impacted. Investigators continue to assess the full scope of the breach and whether the stolen data has been misused.