Tech
EN AZ
Huge DMV data breach impacted current and former Florida residents

Huge DMV data breach impacted current and former Florida residents

arstechnica.com 19.10.2026 18:38 4 views
Florida issues alerts after statewide DMV data breach linked to ShinyHunters.

The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has begun notifying victims impacted by a recent data breach of driver’s license and motor vehicle data, but not everyone whose information was stolen will receive an alert. In a notice posted Friday, FLHSMV confirmed that it took “immediate steps” after discovering that “a malicious actor accessed certain department records on September 4, 2026, using compromised credentials.” There’s “no evidence” that data has yet been misused, the department said, but law enforcement “determined the information potentially affected includes driver license and motor vehicle data, to include document images, and other personal information.” FLHSMV is sending out letters to everyone affected, offering victims one year of credit monitoring from Sontiq, Inc. However, the state acknowledged that it may not have current contact information for many former Florida residents whose data was still being stored.

Those potential victims can confirm if their data was stolen by emailing FLHSMV at [email protected], officials said. For all current and former Florida residents, FLHSMV recommended taking precautions, including monitoring financial accounts and reviewing credit reports for any suspicious activity. In a thread on the Florida subreddit, several Floridians confirmed that they had already taken officials’ third recommendation and placed “a fraud alert or security freeze with major credit bureaus.” Some residents complained that they received notice only this week, even though the breach occurred more than a month ago.

The breach was previously reported by news outlets. On a webpage describing the security incident, FLHSMV confirmed that an “international cybercriminal organization” was behind the breach but did not specify which group or how long they had access. Instead, officials claimed to have “promptly mitigated the breach, launched an investigation, and issued required notification to state authorities.”

Extract — continue reading at the source.

Read full story