Texas Hunting & Fishing License Breach Exposes Data of 3 Million A cyberattack on a third-party vendor handling hunting and fishing license sales for the Texas Parks and Wildlife Department (TPWD) has potentially exposed the personal information of over 3 million license holders. The breach, detected on June 18, 2026, was disclosed by state officials following an investigation led by Texas Cyber Command, the state’s cybersecurity agency established in 2025. The compromised data includes driver’s license numbers, passport numbers (if provided), email addresses, phone numbers, and residential addresses. However, officials confirmed that Social Security numbers, dates of birth, financial information, and records belonging to minors were not accessed. The attack did not disrupt license sales, which will proceed as scheduled for the upcoming licensing year in August. TPWD has implemented enhanced security measures, including additional safeguards, monitoring services, and stronger access controls, in collaboration with the vendor. To mitigate risks for affected individuals, the agency is offering one year of free credit monitoring through Kroll, with enrollment open until September 14, 2026. The breach underscores the vulnerabilities posed by third-party vendors in government data systems. While no financial or highly sensitive personal data was exposed, the incident remains one of the largest reported data exposures in Texas this year due to the number of individuals impacted. Investigators continue to assess the full scope of the breach and whether the stolen data has been misused.