Short answer
Florida's driver licensing agency says that on 4 September 2026 a cybercriminal organization used compromised credentials from a local law enforcement employee to reach driver and vehicle records. The agency reported it about six weeks later and says it has no evidence of misuse. ShinyHunters claims 200,000 records, a figure the state has not confirmed.
If you think your details were included, start with our checklist on what to do after a data breach.
Key facts
| Organization | Florida Department of Highway Safety and Motor Vehicles (FLHSMV) |
|---|---|
| Incident type | Data breach |
| Status | Confirmed by the organization |
| Sector | State government (driver and vehicle licensing) |
| Country | United States |
| Detected | 2026-09-04 |
| Disclosed | 2026-10-16 |
| People or records affected | Not stated by the state. The group ShinyHunters claims more than 200,000 Florida driver records, which the state has not confirmed |
What data was exposed
- Driver license data and motor vehicle information
- Document images and other personal information, per the department's notice
- Access came through the DAVID driver and vehicle database using a local police user's credentials, according to CBS12 and WJLA
What happened
The Florida Department of Highway Safety and Motor Vehicles says a breach happened on 4 September 2026 and that it was reported publicly about six weeks later, on a Friday, according to Orlando Weekly’s 19 October report. The department attributes it to an “international cybercriminal organization” that used compromised credentials.
Those credentials came from an employee of a local Florida law enforcement agency, who had stored them improperly on an electronic device. CBS12 and WJLA report that the credentials belonged to a Plant City Police Department user and gave access to the Driver and Vehicle Information Database, known as DAVID, which law enforcement and other authorized agencies use. The department’s own notice, as quoted by Orlando Weekly, does not name the police department.
What data may be involved
FLHSMV says driver license data, motor vehicle information, document images and other personal information were potentially affected. It has not said how many records were accessed or which fields exist for each person. It says it has no evidence that the data has been misused.
The ShinyHunters claim
CBS12 and WJLA report that a group known as ShinyHunters says it stole more than 200,000 Florida driver records. The state has not confirmed that figure. Treat it as an unverified claim until the department publishes its own count.
Department response
FLHSMV says it blocked unauthorized access, reset the relevant user credentials, engaged cybersecurity professionals and added safeguards. It is working with the Florida Digital Service and law enforcement on a criminal investigation, and has notified the Florida Attorney General’s Office. Notification will go out by mail where the department has contact information. Because people who left Florida or no longer hold a Florida ID may not have a current address on file, the department also issued substitute notice. Drivers identified as potentially affected will get a letter explaining how to enroll in complimentary credit monitoring, and anyone can check by emailing customerinquiry@flhsmv.gov.
What to do if you have held a Florida license or titled a vehicle there
The advice here is mostly about identity theft. A driver license number plus a document image is enough for fake ID attempts and some account takeovers, so a fraud alert or freeze is worth the few minutes it takes. The other risk is a scam built on the breach itself. A fake “FLHSMV” letter that asks you to enroll in monitoring through a link is a common pattern, so only use the steps in a mailed letter you can verify. Our guide to government impersonation scams covers fake agency notices, and the guide to phishing messages shows how to check a link before you click.
Start with our data breach checklist if you think your details were included.
Scams to watch for after this breach
Criminals use breach news as cover. Expect messages that mention the incident, quote real details, or offer help.
- Fake Florida DMV or FLHSMV letters, emails or texts about a breach that ask you to enroll in 'credit monitoring' through a link, which may be a phishing page.
- Identity fraud using driver license numbers and document images, such as fake IDs or new account applications.
- Extortion or 'we have your license' messages from people who claim to hold your records.
- Vehicle title and registration scams that cite real vehicle details to look credible.
What to do if you are affected
- 01Do not enroll in monitoring through a link in an email or text. If you get a mailed letter from FLHSMV, use the enrollment steps in that letter.
- 02To check whether you were affected, email customerinquiry@flhsmv.gov from an address you control.
- 03Place a fraud alert or credit freeze with Equifax, Experian and TransUnion.
- 04Review financial accounts and credit reports, and use the FTC's identitytheft.gov if you see anything unfamiliar.
- 05If your license number is misused, report it to the FLHSMV and your local police.
Frequently asked questions
How were Florida driver records accessed?
FLHSMV says a malicious actor used compromised credentials belonging to an employee of a local Florida law enforcement agency who had improperly stored them on an electronic device. CBS12 and WJLA name a Plant City Police Department user and say the credentials reached the DAVID database used by law enforcement and authorized agencies.
How many people are affected?
The state has not said how many records were accessed. A group called ShinyHunters claims it stole more than 200,000 Florida driver records. That number is the group's claim and has not been confirmed.
Will I be notified?
FLHSMV says it will notify affected people by mail where it has contact information, and has issued substitute notice because it may lack current addresses for people who no longer hold a Florida license or ID. People identified as potentially affected will receive a letter explaining how to enroll in complimentary credit monitoring.
Is there evidence the data has been misused?
The department says it has no evidence that driver license or motor vehicle data has been misused. It says it blocked unauthorized access, reset relevant credentials, engaged cybersecurity professionals and added safeguards, and a criminal investigation is ongoing with the Florida Digital Service and law enforcement.
Sources
This post summarises public reporting as of 2026-11-06. Details of live incidents change; we update posts when the organization or regulators publish new facts. Spot an error? See our editorial and corrections policy.