{"id":"texas-parks-wildlife-licence-breach-jun-2026","category":"breach","status":"closed","title":"Texas Parks and Wildlife licence vendor breach exposes data of more than 3 million hunters and anglers","tldr":"A breach at the vendor behind Texas hunting and fishing licences exposed driver's licence details, passport numbers, emails, phones and home addresses of 3M+ customers.","summary":"Texas Parks and Wildlife Department (TPWD) says the company that runs its hunting and fishing licence system was breached, and that more than three million licence customers were affected. Texas Cyber Command detected the incident on 13 May 2026, and the public notice followed in June. Data that may have been taken includes driver's licence information, passport numbers (where customers supplied one), email addresses, phone numbers and residential addresses. TPWD says Social Security numbers, dates of birth and financial details such as card numbers were not taken, and it has seen no sign that under-18s or any particular group were targeted. TPWD has not named the vendor. It says it has tightened access to customer profile data and is working with the vendor on more safeguards and monitoring. Licence sales continued. TPWD offered one year of free Kroll credit monitoring, with enrolment closing on 14 September 2026, according to press reports. Whether the data has been published or sold, who was responsible, and any legal action are not known from the sources read.","action":"If you hold a Texas hunting or fishing licence, freeze your credit for free with Equifax, Experian and TransUnion, and treat unexpected calls, texts or emails mentioning your licence as possible scams. Questions go to TPWD on (512) 389-4820; the Kroll enrolment deadline of 14 September 2026 has passed, so ask TPWD or Kroll whether late enrolment is possible.","product":"Texas Parks and Wildlife Department hunting and fishing licence system (unnamed vendor)","audience":"home","severity":"high","patch":"na","exploited":false,"cves":[],"tags":["data-breach","texas","tpwd","government","third-party-vendor","driver-licence","passport","identity-theft"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Notification of Data Security Incident","url":"https://tpwd.texas.gov/about/notification-of-data-security-incident","by":"Texas Parks and Wildlife Department","date":"2026-06-18"},{"kind":"news","title":"Texas Parks & Wildlife (TPWD) Data Breach impacts 3 Million People","url":"https://securityaffairs.com/194023/data-breach/texas-parks-wildlife-tpwd-data-breach-impacts-3-million-people.html","by":"Security Affairs","date":"2026-06-22"},{"kind":"news","title":"Texas Parks and Wildlife license vendor breach may expose data of more than 3 million customers","url":"https://www.kcbd.com/2026/06/23/texas-parks-wildlife-license-vendor-breach-may-expose-data-more-than-3-million-customers/","by":"KCBD","date":"2026-06-23"}],"started":"2026-06-18","closed":"2026-06-23","created":"2026-11-03T21:20:44.896Z","updated":"2026-11-03T21:20:44.896Z","cve_notes":[],"timeline":[{"at":"2026-06-23","added":"2026-11-03T21:19:18.455Z","kind":"other","text":"KCBD reported the Kroll support line (844-959-7123) and that licence sales were continuing on schedule. TPWD said it had tightened access controls on customer profile data.","url":"https://www.kcbd.com/2026/06/23/texas-parks-wildlife-license-vendor-breach-may-expose-data-more-than-3-million-customers/","by":"KCBD","patch":"na"},{"at":"2026-06-22","added":"2026-11-03T21:19:18.455Z","kind":"other","text":"Media reports said affected customers were offered one year of free Kroll credit monitoring, with enrolment open until 14 September 2026. TPWD had not named the vendor.","url":"https://securityaffairs.com/194023/data-breach/texas-parks-wildlife-tpwd-data-breach-impacts-3-million-people.html","by":"Security Affairs","patch":"na"},{"at":"2026-06-18","added":"2026-11-03T21:19:18.455Z","kind":"other","text":"The date HARD has on record for the breach becoming public. TPWD's notice says more than 3 million licence customers were affected and that the vendor was working with TPWD on new safeguards and closer monitoring.","url":"https://tpwd.texas.gov/about/notification-of-data-security-incident","by":"Texas Parks and Wildlife Department","patch":"na"},{"at":"2026-05-13","added":"2026-11-03T21:19:18.455Z","kind":"disclosed","text":"Texas Cyber Command detected unauthorised access involving the vendor that runs the Texas Parks and Wildlife Department's hunting and fishing licence system, according to TPWD's notice.","url":"https://tpwd.texas.gov/about/notification-of-data-security-incident","by":"Texas Parks and Wildlife Department","patch":"na"}],"url":"https://hard.fyi/live/texas-parks-wildlife-licence-breach-jun-2026/","json":"https://hard.fyi/api/live?id=texas-parks-wildlife-licence-breach-jun-2026"}