Florida DMV Breach Linked to ShinyHunters Group Affects Residents

The Florida Department of Highway Safety and Motor Vehicles confirmed that a malicious actor accessed department records on September 4, 2026, using compromised credentials. The agency stated it took immediate steps after discovering the unauthorized access, though it has not yet found evidence that the stolen data has been misused.

According to Ars Technica, the breach potentially affected driver license and motor vehicle data, including document images and other personal information. The department is currently sending notification letters to victims, offering one year of credit monitoring services provided by Sontiq, Inc. However, not every person whose information was stolen will receive an alert due to missing contact details.

Investigation and Attribution

FLHSMV acknowledged that an international cybercriminal organization was behind the breach but did not specify the group’s name in its initial public statements. Officials claimed they promptly mitigated the incident by blocking unauthorized access, resetting relevant user credentials, and engaging cybersecurity professionals. They also stated they implemented additional safeguards to protect sensitive information and issued required notifications to state authorities.

Despite the agency’s claim of prompt mitigation, some residents complained they received notice only this week, more than a month after the breach occurred. The investigation remains ongoing, but law enforcement determined the information potentially affected includes a wide range of personal data. News outlets previously reported on the breach before the department began its formal notification process.

Affected Individuals and Scope

The department acknowledged that it may not have current contact information for many former Florida residents whose data was still being stored in its systems. Those potential victims can confirm if their data was stolen by emailing the department at [email protected]. This gap in contact data means some affected individuals may remain unaware of the exposure to their sensitive personal information.

For all current and former Florida residents, FLHSMV recommended taking precautions, including monitoring financial accounts and reviewing credit reports for any suspicious activity. On a Florida subreddit, several residents confirmed they had already placed fraud alerts or security freezes with major credit bureaus in response to the news. This proactive step helps limit the potential damage from identity theft.

What should you do?

Officials suspect that a cybercriminal group called ShinyHunters may have stolen the data. This group recently claimed credit for hacking the FBI, according to Ars Technica. While the department did not specify how long the attackers had access, the potential impact is significant given the nature of the stolen records. The link to ShinyHunters adds a layer of concern for security professionals monitoring this threat actor.

What to do and how to stay safe: Florida DMV

• Check your credit reports for unauthorized inquiries or new accounts.
• Place a fraud alert or security freeze with major credit bureaus.
• Monitor financial accounts for suspicious transactions or charges.
• Verify your status by contacting the relevant state agency if unsure.

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Did the Florida DMV confirm who stole the data?

The department confirmed an international cybercriminal organization was responsible, and investigators suspect the ShinyHunters group may be involved.

What information was exposed in the breach?

The breach potentially affected driver license and motor vehicle data, including document images and other personal information.

How can former residents check if their data was stolen?

Former residents without current contact information can email [email protected] to confirm if their data was affected.