Texas Parks and Wildlife says vendor breach may have exposed data on 3.1 million license customers
Texas Parks and Wildlife Department said a cybersecurity incident involving its license system vendor may have exposed personal data for 3,087,721 hunting and fishing license customers, but not Social Security numbers, birth dates or financial information.
Texas Parks and Wildlife Department said a cybersecurity incident involving its license system vendor may have exposed personal data for more than 3 million hunting and fishing license customers.
Texas Parks and Wildlife Department said Texas Cyber Command detected a cybersecurity incident involving the agency’s license system vendor, which handles hunting and fishing license sales. The department said an unauthorized actor may have obtained personal data from customer profiles for 3,087,721 Texas hunting and fishing license customers.
The department said the possible exposure may include driver license information, passport numbers if provided, email addresses, phone numbers and residential addresses. It said Social Security numbers, dates of birth and financial information, including credit card details, were not obtained.
TPWD said it does not believe current and future customer data are at risk, and it said license sales will continue on schedule for August and the next license year.
TPWD said there is no evidence customers under 18 were involved or that any specific group was targeted. The department also said it strengthened access controls, is adding security features and enhanced monitoring, and is working with the vendor on additional safeguards.
According to TPWD, a dedicated response line, 844-959-7123, was set up for affected customers to confirm eligibility for one year of free credit monitoring. The department said the enrollment deadline is Sept. 14, 2026, and the call center is open Monday through Friday from 8 a.m. to 5:30 p.m. CT.
TPWD did not say how the incident occurred or identify the vendor in the material provided for this report. The department’s account, as summarized in the source report, says the notice followed detection by Texas Cyber Command and a review of customer profile data.
TPWD said it is working with the vendor on additional safeguards and enhanced monitoring while the credit monitoring offer remains open through the September 2026 deadline.
Sources
Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.
Comments ()