Texas Government Data Breach Exposes Over 3 Million Driver’s Licenses

A recent data breach at the Texas Parks and Wildlife Department (TPWD) license system vendor has put personal information of more than three million individuals at risk. The breach was discovered by the Texas Cyber Command, prompting an investigation to assess the extent and impact of the unauthorized access.

The investigation revealed that sensitive information such as Social Security Numbers, dates of birth, and financial data like credit card details were not compromised. However, the threat actor may have accessed personally identifiable information of 3,087,721 Texas hunting and fishing license customers.

The exposed data includes driver’s license information, passport numbers, email addresses, phone numbers, and residential addresses. This information could potentially be used by hackers in phishing and social engineering attacks.

TPWD reassured that customers under the age of 18 were not affected, and there is no evidence of targeting towards any specific group in the breach.

TPWD, responsible for wildlife and fisheries management in Texas, issues hunting and fishing licenses through an external vendor. The agency is collaborating with the vendor to enhance security measures and monitoring services.

Impacted individuals are advised to monitor their credit reports, consider placing a credit freeze or fraud alert, and remain cautious of phishing attempts. TPWD is offering one year of free credit monitoring to affected customers.

BleepingComputer reached out to TPWD for further details on the incident, including the identity of the third-party service provider, awaiting a response.

The agency emphasizes the importance of vigilance against phishing and impersonation scams, urging customers to be cautious of any suspicious communications.

See also  Zero-Day Exploit: Uncovering Critical Vulnerabilities in cPanel and WHM with PoC Access

Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.

The Picus whitepaper demonstrates how breach and attack simulation tests your SIEM and EDR rules to enhance threat detection.

Get the whitepaper