Texas Parks and Wildlife Reports Potential Data Theft Affecting 3 Million
Summary
Texas Parks and Wildlife says a third-party hunting and fishing license vendor suffered a cyber incident that may have exposed data of more than 3 million people. The agency says Social Security, birth-date and financial data were not obtained.
Key points
- TPWD learned from the Texas Cyber Command that its hunting and fishing license sales vendor had suffered a cybersecurity incident.
- The incident may have involved information belonging to more than 3 million license buyers, including contact details, driver’s license information and passport numbers.
- TPWD said Social Security numbers, dates of birth and financial information were not obtained; it reported no evidence that minors were involved or that a specific group was targeted.
- The vendor’s name and the identity of whoever was behind the attack have not been disclosed.
- License sales were not affected. TPWD said access controls for customer profile data were strengthened and additional security features are planned.
Article Details
- Victim Organization
- Texas Parks and Wildlife Department (TPWD)
- Incident Type
- Data breach involving a third-party vendor that sells hunting and fishing licenses; TPWD said hackers may have stolen customer information.
- Data Types Exposed
- Email addresses
- Physical addresses
- Phone numbers
- Driver’s license information
- Passport numbers
- Affected Records
- Roughly 3 million individuals; TPWD said information on more than 3 million individuals may have been stolen.
- Operational Impact
- License sales were not impacted. TPWD said it strengthened access controls for customer profile data and plans to add security features.
- Ransom Or Extortion
- Unknown
- Claim Status
- alleged