How a Payment Processor's Breach Exposed a Structural Weakness in Government IT

A third-party payment processor exposed 27.7 million Texas driver records—license numbers, addresses, dates of birth—in December 2022, detected via billing anomalies. State systems themselves remained secure. The breach reveals a persistent vulnerability: agencies can strengthen their own infrastructure but remain exposed through external vendors handling sensitive data beyond direct control or visibility.