FLORIDA, October 17, 2026 — Florida is notifying potentially affected residents after a September cyberattack on its driver and vehicle records system, with hackers claiming to have stolen more than 200,000 records containing sensitive personal information.
JUST IN: Florida driver licenses and ID cards were breached in a September security incident, the Florida Dept. of Highway Safety and Motor Vehicles says. This includes document images and personal information. More info: https://t.co/UVTbFTeTbX https://t.co/8EcHxLy0WW
— Andy Slater (@AndySlater) October 16, 2026
The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) announced on October 16 that it would send notification letters and offer free identity protection services. The move comes more than a month after the agency discovered unauthorized access to its Driver and Vehicle Information Database (DAVID).
Driver license images, identification details and vehicle records may have been exposed. However, the state has not confirmed the hackers’ claim that more than 200,000 records were stolen or disclosed the final number of affected individuals.
Florida DMV Begins Sending Data Breach Notices
FLHSMV said it would mail letters to current Florida driver license and identification card holders potentially affected by the incident.
The agency is also issuing a substitute public notification for former customers whose current mailing addresses may no longer be available.
That includes people who previously held a Florida driver license, state identification card or vehicle title, even if they have since moved out of Florida.
Former customers can visit the official FLHSMV data breach information page or contact CustomerInquiry@flhsmv.gov for further information.
Hackers Claim 200,000 Records Stolen From Florida Database
The cybercriminal group ShinyHunters claimed responsibility for the attack, alleging that it obtained more than 200,000 records from Florida’s driver information system.
The group reportedly threatened to release the information unless its demands were met. It also claimed to have exploited a password-reset weakness to gain access to multiple accounts.
Those allegations have not been independently confirmed. FLHSMV has not established a public count of stolen records or affected individuals.
The distinction matters because a claimed number of database records does not necessarily represent the same number of people.
Compromised Plant City Police Account Linked to Breach
According to FLHSMV, the agency learned of the incident on September 4, 2026, and immediately began investigating.
Investigators determined that a criminal actor had used compromised credentials belonging to a Plant City Police Department user. The credentials had been improperly stored on the employee’s personal electronic device.
The account provided access to DAVID, a system used by authorized law enforcement personnel to retrieve driver and vehicle information.
FLHSMV said the unauthorized activity was quickly contained and that no further breach was ongoing. The department also notified the Florida Attorney General’s Office and coordinated its response with the Florida Digital Service and Florida Department of Law Enforcement.
Driver License Photos and Personal Information Potentially Exposed
The affected database contains information used to identify drivers and verify vehicle records.
Depending on the information accessed, potentially exposed details may include:
- Driver license and identification card images.
- Full names and residential addresses.
- Dates of birth and driver license numbers.
- Vehicle registration and title information.
- Other identifying information associated with driver records.
Cybersecurity reports have raised concerns about additional identifiers, including Social Security numbers. However, the agency has not confirmed that every category of information was stolen or that all potentially affected residents face the same exposure.
Personal identification records can be valuable to criminals attempting impersonation, phishing or identity fraud, even when financial account information is not involved.
Origin Energy Data Breach: 900,000 Customers Affected in Major Security Incident
Krispy Kreme Data Breach Settlement: Claim Up to $3,500 Before the Deadline
Florida Offers One Year of Free Identity Monitoring
To support potentially affected residents, FLHSMV has partnered with Sontiq, a TransUnion company, to provide complimentary identity and credit monitoring for 12 months.
The offer also includes up to $1 million in identity theft insurance, subject to the provider’s coverage terms.
Residents should follow enrollment instructions provided through verified agency communications rather than unsolicited messages claiming to offer compensation.
The agency has reported no evidence of misuse of the potentially affected information. Nevertheless, residents should remain alert because identity-related risks can persist after unauthorized database access has ended.
Steps Florida Drivers Can Take After the Breach
Residents concerned about possible exposure can take several practical precautions:
- Review official FLHSMV notifications and confirm whether identity monitoring is available.
- Check credit reports for unfamiliar accounts or inquiries.
- Consider placing a free fraud alert or credit freeze with the major credit bureaus.
- Monitor financial accounts and unexpected identity verification requests.
- Avoid suspicious emails or text messages requesting passwords or personal information.
- Report suspected identity theft through IdentityTheft.gov.
A credit freeze can help prevent unauthorized new credit accounts, although it cannot stop every form of identity misuse.
The importance of protecting personal information has also emerged in other cybersecurity incidents, including the ASOS customer data breach, which involved the reported theft of detailed customer profiles.
Investigation Continues After September Cyberattack
The Florida breach became known to officials on September 4 and was publicly confirmed on September 11. The October 16 notification announcement represents the latest major development.
Several questions remain unanswered, including the number of affected people, whether the hackers distributed any stolen information and whether additional accounts were compromised.
The case also raises wider concerns about protecting sensitive information accessed through employee credentials. Similar cybersecurity risks have appeared in reporting on the Craneware data breach, although the incidents are unrelated.
FLHSMV says the unauthorized access was contained. Current and former Florida residents who may be affected are encouraged to check official notices and take appropriate steps to protect their identities while the criminal investigation continues.
Make Swikblog your go-to source on Google for reliable updates, smart insights, and daily trends.
