The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has begun alerting current and former residents about a significant data breach that exposed driver license and motor vehicle records. The department confirmed that a malicious actor accessed certain department records on September 4, 2026, using compromised credentials.
While the state is sending letters to affected individuals, it acknowledged that not everyone whose information was stolen will receive a direct notification. This gap exists because the department may not have current contact information for many former Florida residents whose data remains in state archives. Those who suspect their information was compromised can verify their status by emailing customerinquiry@flhsmv.gov.
ShinyHunters and the Epstein Connection
Although FLHSMV did not name the specific group responsible in its official announcement, officials described the threat as an “international cybercriminal organization.” Independent reporting has linked the breach to ShinyHunters, a group that recently claimed credit for hacking the FBI. Last month, NBC Miami reviewed a dark web post in which ShinyHunters announced the hack and set a September 11 deadline for officials to negotiate a fee to prevent data leaks.
To prove the breach was real, ShinyHunters posted a photo of an alleged driver license belonging to Jeffrey Epstein, a former Florida resident and convicted sex offender. Shortly after the post was published, the group edited the image to remove all mentions of Florida. Ian Gray, vice president of intelligence at threat monitoring company Flashpoint, told NBC Miami that these edits likely indicated that Florida officials were negotiating with ShinyHunters to stop the database from being leaked publicly.
FLHSMV did not answer NBC Miami’s questions about the dark web post or the Epstein document. Instead, the department stated it would post an update when more information is available to share publicly.
How the Hack Occurred
The breach appears to stem from a failure in credential security rather than a sophisticated technical exploit. According to the department’s FAQ, a criminal actor gained unauthorized access to a department system by acquiring credentials from an employee of a local Florida law enforcement agency. The employee had improperly stored the credentials on an electronic device.
Upon discovering the intrusion, FLHSMV stated it took “immediate steps” to mitigate the damage. These actions included blocking unauthorized access, resetting relevant user credentials, engaging cybersecurity professionals, and implementing additional safeguards to protect sensitive information. The department emphasized that there is currently no evidence that the stolen data has been misused.
The investigation into the incident remains ongoing. Officials have determined that the potentially affected information includes driver license and motor vehicle data, document images, and other personal information. For all current and former Florida residents, FLHSMV recommended taking precautions, including monitoring financial accounts and reviewing credit reports for suspicious activity.
Residents have already begun responding to the threat. In a thread on the Florida subreddit, several users confirmed they had placed fraud alerts or security freezes with major credit bureaus. Some residents complained that they received notice only this week, despite the breach occurring more than a month ago.
To assist victims, the state is offering one year of credit monitoring from Sontiq, Inc. The breach highlights the broader vulnerability of personal data held by government agencies. It is distinct from a separate major breach involving 153 million US driver’s licenses linked to IDscan.net last month, though both incidents underscore the ease with which millions of Americans’ personal information can be accessed.
Source: Ars Technica
