Florida Confirms DMV Database Breach Involving Stolen Police Credentials
Summary
Florida confirmed a breach of its DAVID driver database involving compromised credentials from a Plant City police user. ShinyHunters claimed more than 200,000 records were stolen, but the state has not confirmed that figure.
Key points
- Florida’s highway safety agency confirmed a breach of its DAVID driver database and said it was quickly mitigated, with no ongoing breach.
- The agency says the attacker used compromised credentials belonging to one Plant City Police Department user; the credentials were reportedly stored improperly on a personal device.
- ShinyHunters claimed it stole more than 200,000 driver records, but Florida has not confirmed how many records were accessed or taken.
- ShinyHunters described a different access method, claiming it exploited a password-reset flaw to access multiple accounts and download records.
- Florida is working with state agencies, has notified the state attorney general’s office, and says a criminal investigation is ongoing.
Article Details
- Victim Organization
- Florida Department of Highway Safety and Motor Vehicles (FLHSMV)
- Incident Type
- Breach of the DAVID driver database involving compromised credentials, according to FLHSMV. ShinyHunters separately claimed it exploited a password-reset flaw.
- Incident Date
- 2026-09-03
- Data Types Exposed
- Driver records
- Personal information
- Vehicle information
- Affected Records
- Not disclosed by FLHSMV. ShinyHunters claimed more than 200,000 records were stolen; FLHSMV has not confirmed that claim.
- Operational Impact
- FLHSMV said the breach was quickly mitigated and no further breach was ongoing.
- Ransom Or Extortion
- ShinyHunters claimed responsibility as an extortion group and claimed to have stolen more than 200,000 records. The article does not report a ransom demand, and FLHSMV did not confirm the claimed theft or volume.
- Claim Status
- confirmed