A data breach at a third-party vendor used by the Texas Parks and Wildlife Department has exposed the personal information of 3,087,721 individuals, including passport and driver's license data. The breach, which occurred through the vendor's systems, has put over three million Texans at risk of identity theft and other malicious activities. The compromised data includes sensitive information that is difficult to replace or cancel, such as passport and driver's license numbers. This incident highlights the risks associated with relying on third-party vendors to handle sensitive information1. The Texas Parks and Wildlife Department has announced the breach, but the full extent of the damage is still unknown. This breach matters to practitioners because it underscores the importance of thoroughly vetting and securing third-party vendors to prevent such large-scale data exposures.