A network device receives an indication of a text message sent from a sender via a mobile device and receives multiple telematics packets from a vehicle telematics unit. Each of the multiple telematics packets includes operating data from a vehicle, associated with a driver and a time or time interval. The network device identifies the sender as the driver based on information from the text message indication, identifies a sending time of the text message based on the text message indication, and identifies one of the telematics packets with a time or time interval that corresponds to the sending time of the text message. The network device identifies, based on the telematics packet and the text message indication, that the vehicle was being operated during the sending time of the text message and logs a texting-while-driving incident associated with the particular driver.