TxDOT data breach reveals personal info of nearly 300,000 Texans

AUSTIN, Texas — The Texas Department of Transportation has confirmed a major data breach that compromised nearly 300,000 records of crash reports.

The breach occurred on May 12, when a hacker gained access to a personal TxDOT account. The compromised data includes sensitive personal information such as names, addresses, driver’s license numbers and insurance details — data that could potentially be used for identity theft or fraud.

Officials said the breach affected records within TxDOT’s Crash Records Information System (CRIS), potentially impacting hundreds of thousands of Texans who filed accident reports with the agency.

“Personal information included in crash records may contain: first and last name, mailing and/or physical address, driver license number, license plate number, car insurance policy number and other information,” the agency said in a statement.

Although “notification, in this case, is not required by law,” TxDOT is taking proactive steps to inform the public. The agency has begun notifying affected individuals via direct mail and has set up a dedicated hotline for those impacted by the breach.

Individuals who receive a notification letter can call 1-833-918-5951 (toll-free) Monday through Friday, from 8 a.m. to 8 p.m. Central Time, excluding U.S. holidays. Callers should have their engagement number, included in the letter, ready when contacting the hotline.

In response to the breach, TxDOT said it has taken several immediate actions to prevent further unauthorized access. These include disabling the compromised account, launching an internal investigation and strengthening security measures.

The agency has not disclosed the identity of the hacker or whether the breach was part of a larger coordinated cyberattack. The investigation remains ongoing as officials work to assess the full extent of the incident and improve cybersecurity protocols.