Florida DMV Database Breached Through Stolen Police Account — ShinyHunters Claims 200K Records
Florida has confirmed that its DAVID driver database was breached after attackers gained access using compromised credentials belonging to a police department employee.
The Florida Department of Highway Safety and Motor Vehicles says the credentials belonged to a Plant City Police Department user and had been improperly stored on the employee’s personal electronic device.
The ShinyHunters extortion group previously claimed responsibility for the breach and says it stole more than 200,000 Florida driver records.
According to ShinyHunters, the group accessed records from the DAVID system and downloaded driver information, HTML pages and images. As proof of access, the hackers reportedly shared a screenshot of Jeffrey Epstein’s DMV record containing personal and vehicle information.
Interestingly, Florida’s investigation doesn’t completely match ShinyHunters’ version of how the breach happened.
ShinyHunters claimed it exploited a password-reset vulnerability that allowed access to multiple DAVID accounts, while Florida says the intrusion originated from compromised credentials belonging to a single police department user.
Florida says the breach was discovered on September 4 and was quickly mitigated. Officials say there is no indication that access is still ongoing.
The state has not confirmed ShinyHunters’ claim that more than 200,000 records were stolen, so that number currently comes from the attackers themselves.
Pretty crazy that access to a database containing sensitive driver information could potentially come down to credentials being stored on someone’s personal device.
What do you guys think?
Should government and law enforcement database accounts even be allowed to authenticate from personal devices?
Source:
BleepingComputer — September 11, 2026
https://www.bleepingcomputer.com/news/se...e-account/
Florida has confirmed that its DAVID driver database was breached after attackers gained access using compromised credentials belonging to a police department employee.
The Florida Department of Highway Safety and Motor Vehicles says the credentials belonged to a Plant City Police Department user and had been improperly stored on the employee’s personal electronic device.
The ShinyHunters extortion group previously claimed responsibility for the breach and says it stole more than 200,000 Florida driver records.
According to ShinyHunters, the group accessed records from the DAVID system and downloaded driver information, HTML pages and images. As proof of access, the hackers reportedly shared a screenshot of Jeffrey Epstein’s DMV record containing personal and vehicle information.
Interestingly, Florida’s investigation doesn’t completely match ShinyHunters’ version of how the breach happened.
ShinyHunters claimed it exploited a password-reset vulnerability that allowed access to multiple DAVID accounts, while Florida says the intrusion originated from compromised credentials belonging to a single police department user.
Florida says the breach was discovered on September 4 and was quickly mitigated. Officials say there is no indication that access is still ongoing.
The state has not confirmed ShinyHunters’ claim that more than 200,000 records were stolen, so that number currently comes from the attackers themselves.
Pretty crazy that access to a database containing sensitive driver information could potentially come down to credentials being stored on someone’s personal device.
What do you guys think?
Should government and law enforcement database accounts even be allowed to authenticate from personal devices?
Source:
BleepingComputer — September 11, 2026
https://www.bleepingcomputer.com/news/se...e-account/
![[Image: HF-Sig.jpg]](https://xtremediscount.net/Images/HF-Sig.jpg)
