Florida’s motor-vehicle agency has confirmed a data breach—but the public record remains narrower than several early claims circulating online. The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) said it learned of the breach on September 4, 2026, quickly mitigated it, and found that a criminal actor used credentials belonging to one Plant City Police Department user. According to the agency, those credentials had been improperly stored on the employee’s personal electronic device.[1]
Reporting cutoff: September 11, 2026, 11:25 a.m. EDT. This article separates government-confirmed facts from reported threat-actor allegations.
Confirmed by FLHSMV
A department breach occurred; one Plant City Police user’s credentials were exploited; FLHSMV says the breach was mitigated and is not ongoing.[1]
Reported allegation
BleepingComputer reported claims involving DAVID, more than 200,000 records, a password-reset flaw, multiple accounts, and the ShinyHunters name.[3]
Still unknown
Florida has not publicly disclosed how many people were affected or what information may have been accessed.[2]
What Florida Confirmed
In its September 11 statement, FLHSMV described the intruder as part of an “international cybercriminal organization.” That is the agency’s characterization. FLHSMV said its investigation traced the access to a single Plant City Police Department user’s credentials that were improperly housed on the employee’s personal electronic device.[1]
FLHSMV also said it provided the required security-breach notice to the Florida Attorney General and is working with the Florida Digital Service and Florida Department of Law Enforcement. The agency says the breach itself is no longer occurring, while the criminal investigation remains active and additional information will be released later.[1]
The Critical Distinction: Florida Did Not Name DAVID
BleepingComputer reported on September 8 that a group using the ShinyHunters name claimed it had accessed Florida’s Driver and Vehicle Information Database, known as DAVID, stolen more than 200,000 driver records, exploited a password-reset flaw, and compromised multiple accounts—including an alleged FBI account.[3]
Those details remain reported allegations, not government-confirmed findings. The reviewed FLHSMV statement confirms a department breach and the single Plant City credential origin, but it does not name DAVID, ShinyHunters, a password-reset flaw, multiple accounts, an FBI account, a 200,000-record total, or specific exposed data fields.[1][3]
The two accounts are not necessarily mutually exclusive; the public sources simply do not establish how—or whether—the state-confirmed credential access connects to every technical and volume claim reported earlier.
What Remains Unknown
Tampa Bay 28 reported that officials had not disclosed what information may have been accessed or how many people may have been affected.[2] As of this article’s cutoff, the reviewed public sources also do not establish:
- whether any particular Florida driver or Treasure Coast resident was affected;
- which records or data fields were viewed, downloaded, or removed;
- whether FLHSMV has begun individual notifications or will offer monitoring assistance;
- whether the state will confirm any portion of the threat actor’s claimed record count or technical method.
That uncertainty matters. A confirmed breach is not the same as proof that every Floridian’s record was exposed.
What Florida Residents Can Do Now
The following are precautionary steps—not evidence that your information was involved:
- Watch for official information. Check FLHSMV.gov and any notice addressed directly to you. Do not assume a social-media claim establishes that your record was affected.
- Use official sites directly. As a practical anti-phishing precaution, avoid links in unsolicited “DMV breach,” renewal, fine, refund, or identity-verification messages. Type the known government address into your browser yourself.
- If your license or ID number is confirmed compromised, follow FLHSMV’s process. The agency’s standing guidance says to contact local law enforcement and file a police report; it also provides a process to request a “Verify ID Flag” on a Florida driver record.[4]
- Consider a credit freeze if it fits your situation. The Federal Trade Commission says freezes are free to place and lift, do not affect your credit score, and require contacting Equifax, Experian, and TransUnion.[5]
- If you find identity theft, begin recovery promptly. The FTC recommends contacting companies where fraud occurred, placing a fraud alert, reviewing credit reports, and reporting identity theft through IdentityTheft.gov for a personalized recovery plan.[6]
A Practical Lesson for Florida Organizations
The official finding centers on a work credential that FLHSMV says was improperly kept on a personal electronic device.[1] A reasonable defensive response is to keep work passwords and recovery material out of unmanaged personal notes and files, use an approved password manager, require strong multifactor authentication where available, and revoke active sessions promptly after credential exposure. These are practical recommendations, not findings about which controls were or were not present in this incident.
What to Watch Next
The next meaningful update would be a government disclosure identifying the affected population, accessed data, notification plan, confirmed system, or victim-support measures. Until then, the responsible headline is the narrow one: FLHSMV has confirmed a mitigated data breach linked to credentials belonging to one Plant City Police user, while the scope remains undisclosed.
Sources and Further Reading
- Florida Department of Highway Safety and Motor Vehicles — September 11 breach statement
- Tampa Bay 28 — Plant City Police employee credentials led to Florida DMV data breach: FLHSMV
- BleepingComputer — ShinyHunters hackers claim breach of Florida “DAVID” DMV database
- FLHSMV — Identity Theft & Driver License Fraud Protection
- Federal Trade Commission — Credit Freezes and Fraud Alerts
- Federal Trade Commission — How to Recover from Identity Theft