.

Legal Updates for Privacy and Data Security

Vendor Cyber Attack Compromises PII of More Than 3 Million Hunting and Fishing License Holders in Texas

June 30, 2026

by David J. Shannon

The Texas Parks & Wildlife Department (TPWD) announced earlier this month that one of its vendors which handles the sale of state hunting and fishing licenses was the victim of a cybersecurity attack. The threat actor appears to have exfiltrated personal driver’s license information, passport numbers, email addresses, phone numbers and addresses of over 3 million hunting and fishing license holders. 

The State Parks Department advised that the attack did not compromise social security numbers, dates of birth or financial information. Texas Cyber Command, the state’s new cybersecurity authority formed to protect critical infrastructure and coordinate threat responses across state and local government, reportedly assisted in detecting and containing the attack.

TPWD has already set up free credit monitoring for those impacted through Kroll.  According to press reports, no specific group has yet been identified as the perpetrator of the theft. TPWD also advised that business has not been interrupted and license sales were continuing.

This incident once again demonstrates that cybersecurity is only as strong as the weakest link in the supply chain. Businesses must prioritize security across their own environments and those of their vendors and contractors as well.

Firm Highlights

Thought Leadership

Appellate Division Affirms Dismissal of Legal Malpractice Counterclaim Against Martin Law Firm

In Martin v. Loury, 2026 N.J. Super. Unpub. LEXIS 1617 (App. Div. July 15, 2026), Martin Law Firm represented Kirk Loury in an employment matter Mr. Loury filed against his former employer, Concord Equity Group Advisors LLC (“Concord”). The allegations included, among other things, that Loury was not fairly compensated for his employment with Concord. After a bench trial finding in Loury’s favor, the Appellate Division remanded this matter in February 2016 for a second trial. During the second trial, Concord CEO, Lee Argush, testified to lower compensation estimate than first trial. On remand, the second trial judge awarded Mr. Loury the same damages as the first judge, finding Mr. Argush not credible. After the findings during the second trial, Martin Law Firm filed an action against Mr. Loury to recover legal fees and costs of representing Mr. Loury in a second bench trial and Mr. Loury filed a counterclaim against Martin Law Firm for legal malpractice, alleging he should have received an even higher award in the second bench trial. In this allegation, Mr. Loury, through his expert, claimed that Martin Law Firm should have recalled Mr. Loury to the stand to rebut Mr. Argush’s testimony to allege an alternative theory of damages. Mr. Loury’s expert admitted that the second judge already rejected Mr. Argush's theory and accepted Loury's damages theory. The trial court barred Mr. Loury’s expert and dismissed Loury's counterclaim with prejudice before convening the collection trial, and the jury ruled in Martin Law Firm’s favor. Mr. Loury appealed the trial court's pretrial rulings barring his liability expert from testifying in support of his legal malpractice counterclaim, denying his motion for summary judgment on that counterclaim, and denying his motion to amend his counterclaim by adding attorney Joseph A. Martin as a codefendant. In affirming the trial court’s decision, the Appellate Division held that the trial court properly excluded Loury’s expert testimony in the counterclaim against Martin Law Firm because the expert could not explain how calling Loury as a rebuttal witness would have increased damages when the second judge already rejected Mr. Argush's testimony and accepted Loury's damages theory, making the expert’s causation opinion speculative. The Appellate Division also held that the trial court properly denied Mr. Loury's summary judgment motion on his malpractice counterclaim because reasonable minds could differ on whether Mr. Martin's alleged failures would have changed the second judge's damages award, given the judge already found Mr. Argush not credible, creating genuine factual disputes precluding summary judgment. Also, the Appellate Division held that the trial court properly denied Loury's May 2023 motion to add Joseph Martin individually because the statute of limitations expired in February 2022, six years after the 2016 appellate remand when Mr. Loury incurred new legal costs, and relation back did not apply because Mr. Loury knew Mr. Martin's identity throughout and strategically chose to sue only Martin Law Firm in his 2019 counterclaim.