Texas Parks and Wildlife data breach: hunting and fishing license customers' ID details taken through a vendor

What happened in the Texas Parks and Wildlife breach?

The notice places the incident at the license system vendor. It does not name the vendor or say how the actor got in. TPWD says it is working with the vendor on new safeguards and monitoring, that access controls for customer profile data were tightened right away, and that license sales for the 2026-27 year went ahead on schedule.

Date	What the notice and the attorney general's list say
May 13, 2026	Texas Cyber Command detects the incident at the license system vendor
June 26, 2026	Posted on the Texas attorney general's list: 3,087,721 Texans

The list's posting came 44 days after detection. Texas law requires a breach affecting 250 or more Texans to be reported to the attorney general no later than 30 days after discovery. The state-by-state guide compares that rule with other states'. The posting date is when the list showed the report, not necessarily when it was filed.

What information was taken?

TPWD's notice and the attorney general's record do not list the same things.

Information	TPWD's notice	Texas attorney general's record
Driver's license information	May have been obtained	Listed
Passport numbers (if provided)	May have been obtained	Listed, as a government-issued ID number
Email addresses and phone numbers	May have been obtained	Not a category on the form
Home addresses	May have been obtained	Listed
Social Security numbers	Not obtained	Listed
Dates of birth	Not obtained	Listed
Financial information, including card details	Not obtained	Not listed

Neither document explains why the record filed with the attorney general lists Social Security numbers and dates of birth. TPWD says there is no evidence that customers under 18 were involved or that any group was targeted.

Was I affected by the TPWD license breach?

If you bought a Texas hunting or fishing license and gave a driver's license or passport number, your details may be among those involved. The notice does not limit the group by date of purchase. The department's line for questions is (512) 389-4820.

Is TPWD offering credit monitoring?

The notice does not offer credit monitoring or identity protection. It tells customers to review credit reports and financial statements, freeze their credit at Equifax, Experian and TransUnion, which it notes is free, and consider a free one-year fraud alert. It also warns that scammers may use the information to pose as companies or officials. Because email addresses and phone numbers are on the list, messages that claim to be about your license or this incident deserve extra care.

Step	What the notice says
Credit freeze	Free, at each of the three bureaus
Fraud alert	Free, one year, through any one bureau
Questions	(512) 389-4820
Monitoring offer	None in the notice

What the documents leave open

• The name of the license system vendor, and how the actor got in.
• Whether Social Security numbers and dates of birth were involved, given that the two documents disagree.
• How many customers outside Texas were affected. The attorney general's list counts Texans only.

The Texas ranking puts this report beside 2026's other large ones, and the government breach guide shows how other public bodies' notices compare.