A cyberattack that took place last month may have left the personal data of thousands of people vulnerable, according to the Texas Department of Transportation (TxDOT).
According to a June 6 statement from TxDOT, “unusual activity” was detected in the agency’s Crash Records Information System (CRIS) on May 12, 2025.
Investigators discovered that a compromised account had been used to improperly access and download nearly 300,000 crash reports.
The compromised account has been disabled, and TxDOT is working on security measures to prevent similar cyber attacks.
The personal information included in a crash report could include:
- First and last name
- Mailing and/or physical address
- Driver license number
- License plate number
- Car insurance policy number
TxDOT is sending out letters to affected individuals to inform them of the data breach.
Anyone who believes that their information was compromised is advised be on the alert for email or text messages related to crash information. Do not provide anyone with your personal information, including social security number, bank account information, or anything else.
