Texas Parks and Wildlife Department: 3 million Texans affected in hunting, fishing license data breach

3 Million Texans Impacted by Hunting and Fishing License Data Breach

A cybersecurity incident at the Texas Parks and Wildlife Department (TPWD) has exposed the personal data of over 3 million hunting and fishing license holders. The breach, detected by Texas Cyber Command, involved an unauthorized user accessing sensitive information through TPWD’s license system vendor.

Compromised data includes driver’s license numbers, passport numbers (if provided), email addresses, phone numbers, and residential addresses. However, Social Security numbers, dates of birth, and financial details such as credit card information were not affected. There is also no evidence that minors or specific groups were targeted.

TPWD has implemented additional security measures to prevent future incidents. Affected individuals are eligible for one year of free credit monitoring through Kroll, with enrollment available until September 14, 2026. A dedicated call center at (844) 959-7123 is operating Monday through Friday to assist with inquiries.

While no financial data was exposed, TPWD advises affected individuals to monitor credit reports and financial statements for suspicious activity. The breach highlights ongoing risks to personal data in state-managed systems.

Source: https://www.usatoday.com/story/news/nation/2026/06/22/texas-data-breach-tpwd-fishing-hunting/90640838007/

Texas Department of Housing and Community Affairs cybersecurity rating report: https://www.rankiteo.com/company/texas-department-of-housing-and-community-affairs

"id": "TEX1782139743",
"linkid": "texas-department-of-housing-and-community-affairs",
"type": "Breach",
"date": "6/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '3,000,000',
                        'industry': 'Public Sector',
                        'location': 'Texas, USA',
                        'name': 'Texas Parks and Wildlife Department (TPWD)',
                        'type': 'Government Agency'}],
 'attack_vector': 'Third-party vendor compromise',
 'customer_advisories': 'Affected individuals are eligible for one year of '
                        'free credit monitoring through Kroll, with enrollment '
                        'available until September 14, 2026. A dedicated call '
                        'center at (844) 959-7123 is operating Monday through '
                        'Friday to assist with inquiries.',
 'data_breach': {'number_of_records_exposed': '3,000,000',
                 'personally_identifiable_information': 'Driver’s license '
                                                        'numbers, passport '
                                                        'numbers, email '
                                                        'addresses, phone '
                                                        'numbers, residential '
                                                        'addresses',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Personal Identifiable '
                                             'Information (PII)'},
 'description': 'A cybersecurity incident at the Texas Parks and Wildlife '
                'Department (TPWD) has exposed the personal data of over 3 '
                'million hunting and fishing license holders. The breach '
                'involved an unauthorized user accessing sensitive information '
                'through TPWD’s license system vendor. Compromised data '
                'includes driver’s license numbers, passport numbers (if '
                'provided), email addresses, phone numbers, and residential '
                'addresses. Social Security numbers, dates of birth, and '
                'financial details such as credit card information were not '
                'affected. TPWD has implemented additional security measures '
                'to prevent future incidents.',
 'impact': {'data_compromised': 'Driver’s license numbers, passport numbers, '
                                'email addresses, phone numbers, residential '
                                'addresses',
            'identity_theft_risk': 'High',
            'payment_information_risk': 'None',
            'systems_affected': 'TPWD’s license system'},
 'lessons_learned': 'Highlights ongoing risks to personal data in '
                    'state-managed systems and the importance of third-party '
                    'vendor security.',
 'post_incident_analysis': {'corrective_actions': 'Additional security '
                                                  'measures implemented',
                            'root_causes': 'Unauthorized access through TPWD’s '
                                           'license system vendor'},
 'recommendations': 'Affected individuals should monitor credit reports and '
                    'financial statements for suspicious activity. '
                    'Organizations should enhance third-party vendor security '
                    'measures.',
 'references': [{'source': 'Texas Parks and Wildlife Department (TPWD)'}],
 'response': {'communication_strategy': 'Dedicated call center, public '
                                        'advisory',
              'containment_measures': 'Additional security measures '
                                      'implemented',
              'third_party_assistance': 'Kroll (credit monitoring)'},
 'title': '3 Million Texans Impacted by Hunting and Fishing License Data '
          'Breach',
 'type': 'Data Breach'}