TPWD Vendor Breach Exposes License Data

The update mainly sharpens the TPWD breach details: the vendor remains unnamed, but Texas Cyber Command is now explicitly tied to detection and the exposed data list is more specific. It also reframes the response as active mitigation, with TPWD and the vendor adding safeguards and offering credit monitoring.

The story has broadened from a single TPWD vendor breach to a second, separate Texas-related breach at Questo, shifting the focus from one large government-service exposure to a wider vendor-risk pattern affecting both public and consumer platforms. The TPWD incident also picked up more precise scope and access details, including the unnamed vendor and the specific data types not accessed.