The Texas Department of Transportation (TxDOT) confirmed a cyberattack that resulted in the loss of over 300,000 crash records.
A threat actor gained access to the system using compromised credentials, exposing names, addresses, and personally identifiable information (PII).
The attacker downloaded nearly 300,000 crash reports from the Crash Records Information System (CRIS).
Sensitive data stolen includes full names, addresses, driver’s license numbers, license plate numbers, and car insurance policy numbers.
TxDOT disabled access from the compromised account, notified affected individuals, and warned about potential phishing attacks themed around car crashes.
The agency is implementing additional security measures for accounts to prevent similar incidents in the future.
Government agencies are often targeted due to the sensitive citizen information they hold.