InfoSecBulletin Cybersecurity for mankind
The Texas Parks and Wildlife Department (TPWD) revealed a data leak at its license system provider. This leak exposed private information for over three million people.
The Texas Cyber Command found the breach and started looking into how bad it was and what it affected. The state said that Social Security Numbers (SSNs), birth dates, and financial info like credit cards were not harmed.
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
MITRE ATT&CK v20 Unveils 9 New Attack Techniques On AI Exploits, MFA Bypass, and CAPTCHA Evasion
Hackers Exploit Fortinet Flaws to Deploy Stealthy PEERSTITCH Malware on FortiGate Firewalls
Hacker stole Meta GitHub repos; Stole Source Code
Urgent patch! Zoom,NVIDIA and IBM Patch 41 Security flaws
Microsoft patches record braking 1411 flaws; 2 zero days
Anthropic unveils “OSS Scanner” Free AI Vulnerability Scanner for Open-Source Projects
Rise on RCE Exploits Targeting Hikvision Camera Flaw
FortiBleed Attack Compromised 80,000+ Devices, SonicWall Patches 4 SMA1000 Flaws CVSS 10
The hacker might have gotten personal information about 3,087,721 Texas hunting and fishing license customers. This information includes these types of data:
Driver’s license information
Passport numbers
Email addresses
Phone numbers
Residential addresses
The exposed data set is enough for hackers to target affected people in phishing and social engineering tricks that can lead to websites spreading malware or asking for more personal information.
“There is no evidence that customers under the age of 18 were involved or that any specific group was targeted,” TPWD says in the data breach notification.
TPWD is the Texas state agency that controls wildlife and fisheries, state parks, conservation programs, hunting and fishing rules, boating registration, and enforcement by Texas Game Wardens.
The Texas state agency gives out hunting and fishing licenses and permits. These are sold through a outside vendor.
BleepingComputer reported the agency says that it is “working closely with the license system vendor to implement new safeguards and enhanced monitoring services.”
TPWD tells customers to check their credit reports and financial statements. Affected people can get one year of free credit monitoring. They should think about putting a credit freeze or fraud alert with major credit bureaus for extra safety against identity theft.
It is very important to be careful of phishing and impersonation scams. Bad actors might try to contact you pretending to be a company or a real person.
