Florida DMV confirms data breach after stolen credentials exposed driver records

The Florida Department of Highway Safety and Motor Vehicles confirmed that a malicious actor accessed department records on September 4, 2026, using compromised credentials. The agency stated it took immediate steps upon discovering the intrusion and is now notifying individuals whose driver license and motor vehicle data were potentially affected.

Law enforcement determined that the stolen information includes document images and other personal details, according to a notice posted by FLHSMV. The department reported there is currently no evidence that the data has been misused. Officials confirmed that an international cybercriminal organization was responsible for the breach, though they did not specify the duration of the unauthorized access or the exact group involved in the initial report.

Investigation and Attribution

FLHSMV stated that its investigation is ongoing, but a cybercriminal group known as ShinyHunters may have stolen the data. This group recently claimed credit for hacking the FBI, according to reporting by Ars Technica. The department did not name the specific organization in its official webpage description but acknowledged the involvement of an international actor.

Officials claimed to have promptly mitigated the breach by blocking unauthorized access and resetting relevant user credentials. The agency also engaged cybersecurity professionals and implemented additional safeguards to protect sensitive information. FLHSMV issued required notifications to state authorities as part of its response protocol.

Who Is Affected

FLHSMV is sending letters to affected individuals, offering one year of credit monitoring from Sontiq, Inc. However, the state acknowledged it may not have current contact information for many former Florida residents whose data remained in storage. Potential victims without current addresses can confirm if their data was stolen by emailing [email protected], officials said.

Some residents complained about receiving notice only this week, despite the breach occurring more than a month ago. The incident was previously reported by news outlets before the formal notification began. For all current and former residents, FLHSMV recommended monitoring financial accounts and reviewing credit reports for suspicious activity.

What should you do?

Residents who received notices should review the provided credit monitoring offer and check their financial statements for unauthorized transactions. Those who did not receive a letter but suspect they may be affected should contact the department directly. The agency advised placing fraud alerts or security freezes with major credit bureaus as a precautionary measure against identity theft.

What to do and how to stay safe: Florida DMV

• Monitor bank and credit card statements for unauthorized charges or unfamiliar transactions.
• Review credit reports from major bureaus for new accounts or inquiries you did not initiate.
• Place a security freeze or fraud alert on your credit files to prevent new account openings.
• Verify your contact information with state agencies if you have recently moved or changed addresses.

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How did the attackers access the Florida DMV database?

A malicious actor used compromised credentials to access department records on September 4, 2026.

Is there evidence that the stolen data has been misused?

No, the Florida DMV stated there is no evidence that the data has yet been misused.

How can former Florida residents check if their data was stolen?

They can email [email protected] to confirm if their information was included in the breach.