Massive Florida DMV Data Breach Exposes Driver and Vehicle Records

Image: Ars Technica · Source

Florida's DMV suffered a data breach in September 2026, exposing driver’s license and vehicle records of current and former residents. The breach, linked to the ShinyHunters hacking group, arose from leaked law enforcement credentials.

In early September 2026, the Florida Department of Highway Safety and Motor Vehicles (FLHSMV) experienced a significant data breach compromising personal information of current and former Florida residents. The breach came to light after unauthorized access was gained on September 4, 2026, through credentials improperly stored by an employee of a local Florida law enforcement agency.

FLHSMV confirmed that the hacker accessed driver license and motor vehicle records, including document images and other personal data. While there is no confirmed evidence that the stolen data has yet been misused, the department rapidly took action to contain the incident, resetting access credentials and implementing enhanced security measures.

The agency is notifying individuals whose information was compromised and is offering one year of free credit monitoring through Sontiq, Inc. However, officials acknowledge they may lack current contact information for many former residents whose records were involved. Those unsure if their data was exposed are encouraged to contact FLHSMV directly via email.

The breach has been linked to an international cybercriminal group known as ShinyHunters, which previously claimed responsibility for breaching the FBI. Reports indicate ShinyHunters posted samples of the stolen data on the dark web, including a driver's license image belonging to the late Jeffery Epstein, to prove the hack was genuine. Florida authorities are reportedly investigating and possibly negotiating with the hackers to prevent data leaks.

This breach stemmed from a local police department employee's failure to securely store login credentials on an electronic device, enabling attackers to infiltrate DMV systems. The incident underscores ongoing challenges in protecting sensitive personal data maintained by government agencies.

Despite assurances of immediate mitigation, some affected individuals expressed frustration over delayed breach notifications. FLHSMV has committed to providing further updates as the investigation progresses.

This incident is distinct from a separate recent massive breach involving IDscan.net that exposed 153 million US driver licenses, but both highlight how vulnerable critical personal information remains in the digital age, especially as artificial intelligence tools increasingly facilitate data exploitation.