Florida confirms DMV database breached via stolen police account
Florida confirms its DAVID driver database was breached using stolen police credentials; ShinyHunters claims theft of 200,000+ records.
The Florida Department of Highway Safety and Motor Vehicles confirmed a breach of its DAVID driver database, learned of on September 4, 2026, and says the breach was quickly mitigated with none ongoing. Investigators found the attacker used compromised credentials of a single Plant City Police Department employee that were improperly stored on a personal electronic device. The ShinyHunters extortion gang claims it stole more than 200,000 driver records starting September 3 and shared a Jeffrey Epstein record as proof; FLHSMV has not confirmed the count. The agency notified the Florida Attorney General's office and is working with the Florida Digital Service and Florida Department of Law Enforcement.
- ShinyHunters claims over 200,000 DAVID driver records stolen starting September 3
- FLHSMV attributes access to compromised credentials of one Plant City police employee
- Credentials were improperly stored on the employee's personal electronic device
- ShinyHunters earlier claimed a password reset flaw exposed accounts including an FBI agent's
- Record count and exfiltration claims remain unconfirmed amid an ongoing criminal investigation
- ATT&CK
- T1078 Valid AccountsT1190 Exploit Public-Facing ApplicationT1213 Data from Information Repositories
- Products
- DAVID
- Threat actors
- ShinyHunters
- Countries
- United States
From the original article
2 min read at bleepingcomputer.com
The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that its DAVID driver database suffered a data breach, saying the attackers gained access using credentials belonging to a police department employee. [...]
By Lawrence Abrams · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.