DMV breach confirmed as hackers claim 200,000 records stolen

Florida DMV Records Breach: Authorities Trace Attack to Stolen Police Credentials

By Maine News Now

September 12, 2026

The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) confirmed that its Driver and Vehicle Information Database (DAVID) was breached, but the state has not yet released how many driver records were accessed. A Florida investigation points to the use of stolen credentials belonging to a Plant City Police Department employee, while an extortion group called ShinyHunters claims to have taken more than 200,000 driver records.

What Happened

• Date of discovery: FLHSMV learned of the incident on September 4 and says it quickly contained the breach. The agency reports no further unauthorized access has been detected.
• System involved: DAVID, a database that holds driver licenses, vehicle histories, insurance information, photographs, signatures, and other identifying data.
• Suspected method: The Florida investigation traced the breach to credentials that belonged to a single police officer in Plant City. Those credentials were stored insecurely on the officer’s personal electronic device, allowing a criminal actor to log into DAVID.
• Competing claims: The extortion group ShinyHunters announced that it had accessed DAVID and stolen “more than 200,000 driver records.” It has supplied a screenshot of a DAVID record containing a former U.S. financier’s address, Social Security number, birth date, driver’s license details, and registered vehicle information.
• Florida’s stance on ShinyHunters’ claim: The state has not confirmed the number of records taken and has not publicly named ShinyHunters. The FLHSMV statement refers only to an “international cybercriminal organization.”

Investigation and Response

• Notification: FLHSMV complied with state law by informing the Florida Office of the Attorney General and is working with the Florida Digital Service and the Florida Department of Law Enforcement on the criminal investigation.
• Current status: Officials say the investigation is ongoing and that additional information will be released when appropriate.
• Security lessons highlighted: The incident underscores the risks of storing agency credentials on personal devices and the potential for password‑reset or social‑engineering attacks. Florida officials have not corroborated ShinyHunters’ claim that a password‑reset flaw was the entry point, nor that multiple accounts—including that of an FBI agent—were compromised.

The Bigger Picture

Florida’s motor‑vehicle agencies hold a wide array of personal data, including Social Security numbers, driver identification numbers, addresses, and medical or disability information. If a perpetrator obtains such data, it can facilitate identity theft, targeted phishing, and other fraud schemes. Although Florida has not yet released the exact scope of the breach, state officials warn that the data could be used for sophisticated scams.

The ShinyHunters group is known for data‑theft attacks on a range of companies, including Salesforce, Google, Cisco, and Match Group. Their tactics have involved voice phishing, social‑engineering, and exploiting single sign‑on vulnerabilities. While the Florida agency has not identified the group by name, the group’s claim of a large‑scale theft has been widely reported in technology news outlets.

Next Steps for Florida Residents

Until the FLHSMV releases further details, residents who hold Florida driver licenses are advised to monitor their credit reports and financial accounts for suspicious activity. The agency has not issued any official notice to affected drivers, nor has it confirmed the number of individuals whose records may have been exposed.

For now, the focus remains on the ongoing investigation and on ensuring that agency credentials are stored and used securely.

The Florida Department of Highway Safety and Motor Vehicles will provide additional information when it becomes available.