Back to overview
Confidence MediumJun 19, 2026texas.gov

Texas Parks and Wildlife Department data breach exposes over 3 million driver's licenses

PatternExternal actor · Hacking · Confidentiality impact

The Texas Parks and Wildlife Department (TPWD) disclosed a data breach at its license system vendor that exposed personal information, including driver's licenses, for more than three million individuals.

Signal date
Jun 19, 2026
Updated
Jun 25, 2026
Confidence
Medium
Sources
2 sources

Signal context

First seen: Jun 19, 2026

Last updated: Jun 25, 2026

Status: Public signal

Key points

  • Data breach occurred at a third-party license system vendor for TPWD.
  • Over 3 million individuals affected.
  • Exposed personal information, including driver's licenses.

Signal analysis

Beta

It helps compare this signal with other published signals without treating the labels as final determinations.

Affected organization
Texas logo
Texas

Likely country: 🇺🇸 United States

inferred from company domain

    Threat source
    Hacking activity

    The feed marks multiple actor roles. Treat this as a review signal rather than a final attribution.

    • Source type: outside the affected organization
    • Source type: supplier or third-party involvement
    Business impact
    Potential data exposure

    Impact area: Confidentiality

    Likely asset: User or customer data

    Trend context
    74 signals with similar action pattern
    • 1 signal in the same sector
    • 93 signals with the same likely impact area
    • 1 signal linked to this organization/domain
    Mentioned entities
    TexasData DisclosureTexas Parks and Wildlife DepartmentThe Texas Parks and WildlifeDepartmentTPWDTPWD. OverExposed

    External sources

    Related signals

    Grouped by why the signal is relevant.

    agelessrx.com logoAgelessrxJun 25, 2026
    Same action patternSame impact area

    AgelessRx Data Breach Exposes Patient Health Information

    AgelessRx, a telehealth platform specializing in longevity and anti-aging treatments, disclosed a data breach. An unauthorized actor gained access to certain help-desk tickets within the company's system between April 17 and April 22, 2026. The breach exposed sensitive patient health information, including names, dates of birth, health diagnoses or conditions, medications, and prescription details. The incident was reported to attorneys general on June 24, 2026, and notification letters to affected individuals began on June 23, 2026.

    onetrust.com logoOnetrustJun 24, 2026
    Same action patternSame impact area

    OneTrust Customer Data Exposed in Klue Supply Chain Attack

    OneTrust, a privacy, security, and governance technology company, was among the organizations affected by the Klue supply chain attack. The incident involved unauthorized access to customer data within Salesforce environments, due to compromised OAuth tokens from the Klue platform.

    hackerone.com logoHackeroneJun 24, 2026
    Same action patternSame impact area

    HackerOne Affected by Klue Supply Chain Attack

    Cybersecurity firm HackerOne was among the organizations impacted by the Klue supply chain attack, which involved unauthorized access to customer data within Salesforce environments. The attack leveraged compromised OAuth tokens from the Klue platform.

    klue.com logoKlueJun 24, 2026
    Same action patternSame impact area

    Klue Data Breach Leads to Salesforce Customer Data Exposure

    Market intelligence platform Klue experienced a data breach, uncovered on June 12, 2026, where attackers stole OAuth tokens used to access customer data from Salesforce. The Icarus group claimed responsibility, leaking business contacts, sales notes, and pricing details from multiple victims. The incident was widely reported on June 24, 2026.

    snyk.io logoSnykJun 24, 2026
    Same action patternSame impact area

    Snyk Affected by Klue Supply Chain Data Breach

    Developer security platform Snyk was impacted by the Klue supply chain attack, which led to unauthorized access to customer data within Salesforce environments. The attack leveraged compromised OAuth tokens from the Klue platform.

    jamf.com logoJamfJun 24, 2026
    Same action patternSame impact area

    Jamf Customer Data Exposed in Klue Supply Chain Attack

    Jamf, a provider of Apple device management solutions, was impacted by the Klue supply chain attack. The incident involved unauthorized access to customer data stored in Salesforce instances, stemming from compromised OAuth tokens from the Klue platform. The Icarus extortion group claimed responsibility for the attack.