Florida says motor vehicle data breach tied to credentials stolen from officer’s personal device
ShinyHunters breached Florida's DMV using credentials stolen from a police officer's personal device; the state confirmed the breach and is investigating.
Florida's Department of Highway Safety and Motor Vehicles (FLHSMV) confirmed a data breach after ShinyHunters obtained DMV data using credentials a criminal actor took from a Plant City police officer's personal electronic device. The department learned of the breach on September 4, is investigating with the Florida Digital Service, and ShinyHunters shared a DMV record of Jeffrey Epstein as proof of access. Experts initially speculated a link to the IDScan breach of 153 million driver's licenses. Anthropic reported that suspected ShinyHunters affiliates use AI to scan credentials, map systems, and exfiltrate data, in one case moving from a stolen developer token to cloud admin access in about three hours.
- ShinyHunters claimed access Monday; FLHSMV publicly confirmed the breach Thursday night
- Credentials were improperly stored on a Plant City officer's personal device
- Experts initially speculated a link to IDScan's breach of 153 million driver's licenses
- Anthropic: affiliates used AI to pivot from stolen token to cloud admin in ~3 hours
- Group previously hit Jack Henry, McKesson, Ticketmaster, AT&T, ADT, Rockstar
- Products
- Florida Digital Service
- Threat actors
- ShinyHunters
From the original article
2 min read at therecord.mediaThe Florida Department of Motor Vehicles confirmed a data breach claimed by the cybercrime group ShinyHunters, saying it originated with the theft of credentials stored on a police officer's personal device.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.