Texas TPWD Vendor Breach Exposes 3 Million Customer Records

Texas Cyber Command disclosed a vendor-related supply-chain data breach affecting the Texas Parks and Wildlife Department that exposed PII for 3,087,721 adult customers. Exfiltrated information includes driver’s license details, passport numbers when provided, customer email addresses, phone numbers, and residential addresses; authorities state SSNs, dates of birth, and credit card data were not taken. The vendor identity remains undisclosed while TPWD and the vendor implement tightened access controls and monitoring; affected individuals are advised to place credit freezes, enable fraud alerts, and remain vigilant for targeted phishing and social‑engineering attempts.