about

Security Vulnerability Disclosure

The Texas Comptroller of Public Accounts is committed to providing reasonable security measures to protect against the exposure, corruption and alterations of the data and information under our control.

Public Vulnerability Disclosure Submission

If you discover a vulnerability on one of our information systems, please contact us at Report.Vulnerable@cpa.texas.gov.

Your submission should include as much of the following information you can provide: 

• Date the vulnerability was discovered.
• A description of the service or system affected.
• How the potential vulnerability can be identified, demonstrated or reproduced.
• What type of functional impact the vulnerability allows, such as data loss, information exposure or misuse of computing resources.