TxDOT CRIS: Security Breach, Private Data Leak

TxDOT CRIS Breach Under Investigation After Records Exposed

The Texas Department of Transportation (TxDOT) is investigating a serious data breach in its Crash Records Information System (CRIS). A system account tied to the TxDOT CRIS platform was compromised. This allowed someone to access and download nearly 300,000 crash reports.

Now, TxDOT is notifying people who may have been affected. The agency says it is also adding stronger security measures to the system.

When the TxDOT CRIS Breach Was Discovered

On May 12, 2025, TxDOT noticed unusual activity in the TxDOT CRIS system. Staff traced the issue to a single account that had been compromised. The account was used to download crash reports without permission.

TxDOT quickly shut down the account. The agency also launched a full investigation.

Personal Information Involved in the TxDOT CRIS Breach

The crash reports accessed in the TxDOT CRIS breach may have included personal information. Depending on the report, that information could include:

• First and last names
• Mailing or physical addresses
• Driver’s license numbers
• License plate numbers
• Vehicle make and model
• Car insurance policy numbers
• Injury descriptions
• A summary of the crash

This data is collected and stored as part of TxDOT’s traffic crash reporting system.

TxDOT’s Response to the Breach

Even though the law does not require it, TxDOT has decided to notify people who were affected by the TxDOT CRIS breach. Letters are being sent to individuals whose personal details were included in the downloaded reports.

The agency has taken the following actions:

1. Disabled the account that was compromised.
2. Launched a detailed investigation into what happened.
3. Started adding extra security protections to prevent future breaches.

TxDOT has also set up a dedicated phone line for those with questions. The toll-free number is 1-833-918-5951. The line is open Monday through Friday, 8:00 a.m. to 8:00 p.m. Central Time, except on U.S. holidays. Callers should have their engagement number ready, which can be found in the letter they received.

What to Do After the TxDOT CRIS Data Breach

TxDOT is offering advice to help people protect themselves after the TxDOT CRIS breach. Officials are urging people to watch out for scams and keep a close eye on their personal and financial information.

Here are some recommended steps:

• Watch for suspicious messages: Do not share personal information with unknown callers, emails, or text messages. Be especially careful if the message mentions crash details.
• Check your credit reports: Everyone can request one free credit report each year from the three major credit bureaus — Experian, Equifax, and TransUnion.

Ways to request your free reports:

• Online: AnnualCreditReport.com
• Phone: 1-877-322-8228
• Mail: Send a completed request form to:
  Annual Credit Report Request Service
  P.O. Box 105281
  Atlanta, GA 30348-5281
• Request a fraud alert: Contact any one of the credit bureaus to place a fraud alert. This will make it harder for someone to open accounts in your name. The agency you call will notify the other two.
• Freeze your credit: A credit freeze adds even more protection. It stops anyone from opening a credit account in your name unless you lift the freeze.

Credit Bureau Contacts for TxDOT CRIS Breach Protection

Here are the websites and toll-free phone numbers for the three major credit bureaus:

• Equifax
  Website: www.equifax.com
  Phone: 1-888-378-4329
• Experian
  Website: www.experian.com
  Phone: 1-888-397-3742
• TransUnion
  Website: www.transunion.com
  Phone: 1-800-680-7289

These agencies can help you place fraud alerts, freeze your credit, and monitor your credit file.

Security Changes and Ongoing Investigation

TxDOT says the TxDOT CRIS data breach is being taken seriously. The investigation is still active. Officials have not confirmed if criminal activity is suspected.

The agency has promised to strengthen its systems to prevent future attacks. While the exact security updates are not public, TxDOT has stated that protecting personal information is a top priority moving forward.