Texas Hunting and Fishing License System Exposes Personal Data of More Than Three Million Users

The Texas Parks and Wildlife Department has confirmed a cybersecurity breach affecting the state’s digital system for selling hunting and fishing licenses, raising concerns over the personal data held by modern wildlife agencies and their external technology providers.

According to the department’s official notice, the incident was detected by Texas Cyber Command and occurred at the third-party vendor responsible for managing the licensing platform.

A preliminary investigation indicates that an unauthorized actor may have obtained information linked to more than three million customers connected with hunting and fishing licenses in Texas. The potentially affected data includes driver’s license information, passport numbers where customers provided them, email addresses, phone numbers and home addresses.

The department says, however, that Social Security numbers, dates of birth and financial information, including credit card details, were not obtained. It also says there is no evidence that people under the age of 18 were affected, or that the incident targeted any specific group of users.

A breach in a core hunting and fishing system

The case is significant for the outdoor sector because it does not involve a peripheral service, but a central administrative tool for hunters and anglers: the issuing of permits and licenses.

In states such as Texas, where license sales, season rules and authorizations form a major part of wildlife administration, digital systems have made applications, payments and controls more efficient. At the same time, they concentrate large volumes of personal data in platforms often operated by outside vendors.

TPWD says it recognizes the seriousness of the incident and has identified and implemented additional security options to better protect customer information. The agency says it is also working with the licensing system vendor to introduce further safeguards, strengthen access controls on customer profiles and expand monitoring.

License sales will continue in August

According to the official notice, license sales will continue on the planned schedule in August and for the new license year.

The agency is offering affected customers one year of free credit monitoring through Kroll, with enrollment open until September 14, 2026.

The department is also advising users to monitor financial activity, review credit reports, consider placing a credit freeze with the main U.S. credit agencies and remain alert to possible impersonation attempts.

That warning is especially relevant because contact details and home addresses, even without banking information, can still be used in fraud, phishing or fake communications designed to appear as if they come from official agencies.

Beyond the immediate scope of this case, the breach places cybersecurity at the center of wildlife, hunting and fishing administration. Public trust now depends not only on clear regulations and effective natural resource management, but also on the protection of the personal data behind modern licensing systems.