ShinyHunters claims breach of Florida DAVID DMV database and theft of more than 200,000 driver records

ShinyHunters says it broke into Florida’s DAVID driver database and stole more than 200,000 motorist records used by law enforcement and state officials. The group claims it exploited a password-reset flaw in the Florida Highway Safety and Motor Vehicles system to compromise multiple accounts, including accounts belonging to DMV staff and an FBI agent, then enumerated records by ID and downloaded HTML pages and images. Sample data shown reportedly included Social Security numbers, addresses, birth dates, driver’s license details, and vehicle information.
Why it matters: If true, this would expose highly sensitive identity and vehicle data for Florida drivers and could fuel identity theft, fraud, and targeted scams. Florida agencies and any linked users should urgently review account security, patch the reported reset weakness, and watch for follow-on phishing or misuse of DMV records.

Sources

Florida says motor vehicle data breach tied to credentials stolen from officer’s personal device
2026.09.11 97% relevant
This source confirms the previously claimed Florida motor-vehicle breach as legitimate and adds the specific access path: credentials stolen from a Plant City Police Department user and stored on a personal device, plus the state’s investigation timeline and response.
Florida confirms DMV database breached via stolen police account
Lawrence Abrams 2026.09.11 98% relevant
This source confirms the same DAVID breach from the victim side and adds key new details: Florida says the intrusion was real, was mitigated, and was carried out using compromised credentials from a Plant City Police Department account stored on a personal device, while not confirming ShinyHunters' earlier claimed password-reset flaw or the 200,000-record count.
ShinyHunters hackers claim breach of Florida "DAVID" DMV database
Lawrence Abrams 2026.09.08 100% relevant
This article appears to be the first concrete report of the alleged Florida DAVID breach, including the claimed victim system, threat actor, reported attack path, and estimated record count.
← Back to all stories