A major data breach at the Texas Department of Transportation has exposed vehicle crash records tied to nearly 300,000 people. The breach included sensitive personal and injury-related details.

The suspicious activity was discovered on May 12, 2025. By then, nearly 300,000 car accident reports had already been downloaded without permission. The agency quickly shut down the compromised account.

Each crash report may contain a wide range of personal details

These include names, mailing and home addresses, driver’s license numbers, plate numbers, and insurance policy information. For many Texans, that’s a lot more than just minor collision paperwork.

Even though the state isn’t legally required to notify victims, TxDOT says it’s doing so out of caution. Letters have already been sent to people whose data was included in the breach. If you received one, TxDOT is asking that you call their dedicated hotline at 1-833-918-5951. It’s open Monday through Friday, from 8 a.m. to 8 p.m. Central Time. Be sure to have the engagement number from your letter ready.

CRIS is used by law enforcement, attorneys, and insurers to pull official crash data quickly. 

That ease of access is helpful, but it also opens the door to risk if accounts are not properly secured. As more government systems move online, weak spots like this become bigger targets.

TxDOT says it’s adding new security protections to prevent similar breaches in the future. So far, they haven’t shared exactly what those measures are. The incident is still under investigation.

If you’ve been involved in a car crash in Texas in recent years, especially one with injuries, it may be smart to keep an eye on your mail and monitor your credit. This breach could have ripple effects long after the road is cleared, so to speak.