The Texas Transport Department (TXDOT) is warning that he faced data breech after a danger actor downloaded 300,000 crash records from his database.
The incident occurred on May 12, 2025, and a danger actor led to logging using the credentials compromised in the TXDOT system.
“On May 12, 2025, TXDOT identified unusual activity in its Crash Records Information System (CRIS),” TXDOT reads declaration,
“Further investigation revealed that the activity was generated from an account, which was compromised and used to reach and download about 300,000 crash reports improperly. TXDOT immediately disabled access to the compromised account.”
The data exposed in these crash records includes:
- Full name
- Physical address
- Driver license number
- License plate number
- Car insurance policy number
- Other information, such as continuous injuries or accident details
The contact of this data increases the risk for social engineering, scamming and fish attacks for affected individuals, the total number of which has not yet been revealed.
TXDOT has started distribution Data violation notifications For affected persons, they urged them to increase their vigilance against potentially targeted attacks using stolen information.
No identity was offered to the recipients of an identity theft protection or credit monitoring service coverage, but a dedicated support line was set up to assist them.
It is also recommended that the affected individuals monitor their credit reports for suspicious activity and consider freezing their credit to avoid loss of fraud.
Meanwhile, the agency assured the public that it has blocked the unauthorized reach of the attacker in the agreement entered into an agreement and is implementing additional security measures.
Bleepingcomputer has approached the Transport Department of Texas to know more about the type of attack and how many people affected, and we will update this post when we receive the response.
As a writing, no ransomware or forced recovery groups have taken responsibility for this attack.