Texas Parks and Wildlife Breach Exposes Data of 3 Million License Customers
Summary
TPWD disclosed unauthorized access at its third-party license-system vendor affecting 3,087,721 hunting and fishing customers. Driver’s license and contact details may have been obtained; SSNs, birth dates and financial data were not impacted.
Key points
- The Texas Cyber Command discovered the intrusion and investigated its extent and impact.
- The incident affected 3,087,721 Texas hunting and fishing license customers.
- A threat actor may have obtained driver’s license details, passport numbers, email addresses, phone numbers and residential addresses.
- TPWD said Social Security numbers, dates of birth and financial information were not impacted.
- TPWD is working with the vendor on safeguards and enhanced monitoring and is offering impacted individuals one year of free credit monitoring.
- The exposed information could be used in phishing and social engineering scams; TPWD advised customers to remain vigilant.
Article Details
- Victim Organization
- Texas Parks and Wildlife Department (TPWD)
- Incident Type
- Data breach involving unauthorized access to a third-party license system vendor
- Data Types Exposed
- Driver’s license information
- Passport numbers
- Email addresses
- Phone numbers
- Residential addresses
- Affected Records
- 3,087,721 customers
- Operational Impact
- The Texas Cyber Command investigated the intrusion. TPWD said it was working with the license system vendor to implement safeguards and enhanced monitoring. No operational disruption was reported.
- Claim Status
- confirmed