INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Florida DMV database breached via stolen police account credentials

| 2026-09-11 19:00 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) confirmed a data breach on September 4, 2026, after the ShinyHunters extortion gang claimed to have compromised its DAVID driver database. The attackers used compromised credentials belonging to a single Plant City Police Department user that had been improperly stored on an employee's personal electronic device. As a result of this attack, more than 200,000 driver records were stolen from the system. ShinyHunters initially claimed they exploited a password reset flaw to gain access to multiple DAVID accounts but later stated they lost access and believed the flaw was being patched. The data breach was quickly mitigated by FLHSMV, with no further breaches occurring or ongoing at this time.
Technical Mitigations AI-generated
• Patch the DAVID driver database to address potential password reset flaws. • Block or hunt for compromised credentials belonging to a single Plant City Police Department user that had been improperly stored on an employee's personal electronic device. • Monitor for indicators of exploitation, such as iterating through DAVID record IDs and downloading associated HTML pages and images.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
ShinyHuntersShinyHunters
Target & Sectors
Global Scope
Incident Timeline
‎September 3
Threat actors ShinyHunters iterated through DAVID record IDs and downloaded associated HTML pages and images starting on September 3.
threat_actor ShinyHunters
ShinyHunters said it then began iterating through DAVID record IDs and downloading associated HTML pages and images beginning on September 3.
organisation HTML
ShinyHunters said it then began iterating through DAVID record IDs and downloading associated HTML pages and images beginning on September 3.
‎September 4, 2026
ShinyHunters claimed to have exploited a password reset flaw, but FLHSMV's investigation found that the breach was actually caused by compromised credentials belonging to a single Plant City Police Department user.
tactic Data Breach
"On September 4, 2026, FLHSMV learned of a data breach conducted by an international cybercriminal organization," the agency said in a statement posted to X .
threat_actor ShinyHunters
ShinyHunters claimed a different access method FLHSMV's findings are different from how ShinyHunters previously claimed to have gained access to the database.
ShinyHunters later told BleepingComputer that it had lost access to the system and believed the flaw was being patched.
FLHSMV has not disclosed how many records were accessed or stolen during the breach and has not confirmed ShinyHunters' claim that more than 200,000 records were taken.
organisation BleepingComputer
ShinyHunters later told BleepingComputer that it had lost access to the system and believed the flaw was being patched.
data_breach 200,000 driver records
FLHSMV has not disclosed how many records were accessed or stolen during the breach and has not confirmed ShinyHunters' claim that more than 200,000 records were taken.
organisation the Florida Office of the Attorney
The agency says it has notified the Florida Office of the Attorney General of the breach and is working with the Florida Digital Service and Florida Department of Law Enforcement as part of its response.
organisation the Florida Digital Service
The agency says it has notified the Florida Office of the Attorney General of the breach and is working with the Florida Digital Service and Florida Department of Law Enforcement as part of its response.
organisation Florida Department of Law Enforcement
The agency says it has notified the Florida Office of the Attorney General of the breach and is working with the Florida Digital Service and Florida Department of Law Enforcement as part of its response.
organisation NFL
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.
organisation CHANEL
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.
‎2026/09/11
The Florida Department of Highway Safety and Motor Vehicles confirmed that its DAVID driver database was breached after the ShinyHunters extortion gang claimed to have compromised a stolen police account.
organisation FLHSMV
The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that its DAVID driver database suffered a data breach after the ShinyHunters extortion gang claimed to have compromised the system.
threat_actor ShinyHunters
The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that its DAVID driver database suffered a data breach after the ShinyHunters extortion gang claimed to have compromised the system.
The disclosure comes after the ShinyHunters extortion group claimed it breached the DAVID database  and stole more than 200,000 driver records.
data_breach 200,000 driver records
The disclosure comes after the ShinyHunters extortion group claimed it breached the DAVID database  and stole more than 200,000 driver records.
Tactical Metrics
Metrics
data_breach
200,000
Driver Records
The disclosure comes after the ShinyHunters extortion group claimed it breached the DAVID database  and stole more than 200,000 driver records.
FLHSMV has not disclosed how many records were accessed or stolen during the breach and has not confirmed ShinyHunters' claim that more than 200,000 records were taken.
Intelligence Sources
BleepingComputer 2026-09-11