The Texas Parks and Wildlife Department says a third-party vendor that handles hunting and fishing licenses was hacked, exposing driver’s license numbers, passport numbers and contact details for over 3 million Texans. Permanent ID data can’t be reset, putting victims at long-term risk of identity fraud. Threat intelligence links this incident to similar attacks on other state wildlife licensing platforms, highlighting vendor security gaps.

• A hack of a third-party TPWD vendor exposed driver's license numbers, passport numbers, and contact info for over 3 million Texans, with conflicting reports on whether SSNs were also included.
• The same hacker ("Wikkid") was selling this data on dark-web forums before the breach was disclosed, and similar attack patterns have hit Virginia's wildlife licensing system, suggesting a broader vulnerability across shared vendor platforms (Aspira Connect, PayIt Outdoors, Tyler Technologies).
• No federal standard requires these licensing vendors to maintain baseline security, and state contracts often skip mandatory security audits.
• Affected Texans can get free credit monitoring through Kroll until September 14, 2026, but since driver's license and passport numbers can't be reset like passwords, the exposure creates long-term identity fraud risk.