Florida officials have confirmed a data breach at the Department of Highway Safety and Motor Vehicles, with hackers claiming to have stolen over 200,000 driver records.
The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that it experienced a data breach linked to credentials from a user within the Plant City Police Department. The breach has raised concerns as hackers known as ShinyHunters claim to have stolen more than 200,000 driver records from the state’s Driver and Vehicle Information Database (DAVID).
FLHSMV reported that it became aware of the breach on September 4, 2023, and acted quickly to mitigate the situation. The agency asserts that there has been no ongoing unauthorized access since the initial incident. However, the claims from ShinyHunters have prompted scrutiny regarding the extent of the breach and the specific information compromised.
ShinyHunters, a known extortion group, has alleged that they accessed sensitive data from the DAVID system, which contains not only basic driver information but also photographs, signatures, vehicle history, insurance details, and other identifying records. The group provided a screenshot of a record purportedly belonging to Jeffrey Epstein as evidence of their access, which included personal details such as an address, Social Security number, and driver’s license information.
Despite these claims, FLHSMV has not confirmed the number of records accessed or the specific data that was taken. The agency’s investigation revealed that the breach was traced back to improperly stored credentials belonging to a single user from the Plant City Police Department. These credentials were allegedly stored on the employee’s personal electronic device, which allowed the attacker to exploit them.
While ShinyHunters initially claimed that they exploited a password-reset flaw to gain access to multiple accounts, FLHSMV has not substantiated this claim. Instead, the agency has maintained that the breach was due to compromised police credentials, marking a divergence from the hackers’ narrative.
FLHSMV has notified the Florida Office of the Attorney General as required by state law and is collaborating with the Florida Digital Service and the Florida Department of Law Enforcement. The investigation into the breach is ongoing, and officials have indicated that more information will be released when appropriate.
Florida’s policy treats personal information in motor vehicle records as confidential, which includes Social Security numbers, driver identification numbers, and addresses. This type of data can be particularly valuable for identity theft, making the breach a serious concern for affected individuals.
As the investigation continues, experts warn that the breach could lead to increased scams targeting individuals whose information may have been compromised. Scammers often use personal details to create convincing narratives, making it crucial for individuals to remain vigilant.
In light of the breach, individuals are advised to take proactive measures to protect their personal information. This includes placing a credit freeze with major credit bureaus, regularly checking credit reports for unfamiliar accounts, and monitoring financial accounts for suspicious activity. Additionally, it is important to be cautious of unsolicited communications claiming to be from the DMV or other government agencies.
Scammers may attempt to exploit the breach by sending fake alerts or phishing messages that appear legitimate. Individuals should avoid clicking on links in unexpected messages and instead verify any notices directly through official channels, such as the FLHSMV website.
While FLHSMV has confirmed the breach, many questions remain unanswered, including the total number of records affected and the specific information that was compromised. Until further details are released, it is essential for individuals to remain alert and take steps to safeguard their personal information.
As the situation develops, the importance of securing personal data and being aware of potential identity theft cannot be overstated. Individuals are encouraged to stay informed and take necessary precautions to protect themselves from the fallout of this breach, which has implications not only for those directly affected but for the integrity of state motor vehicle systems as a whole.
For ongoing updates and information on how to protect your personal data, stay tuned to reliable sources. This incident underscores the need for vigilance in an increasingly digital world where personal information is often at risk.
According to BleepingComputer, the investigation into the breach is still active, and more information is expected to emerge as authorities continue their work.