If you have ever held a Florida driver license, ID card or vehicle title, your records may be part of the Florida DMV data breach, even if you moved away years ago. On 16 October 2026 the Florida Department of Highway Safety and Motor Vehicles (FLHSMV) extended its warning to former residents and began offering a year of free identity monitoring.
Key takeaways
- An attacker got into FLHSMV records on 4 September 2026 using one Plant City Police Department user’s login, which the state says had been stored improperly on a personal device.
- The ShinyHunters extortion group claimed it took more than 200,000 driver records. Florida has not confirmed any number.
- The state says driver license data, motor vehicle data, document images and other personal information may have been exposed.
- Current license and ID holders who may be affected are getting letters. Former holders have to contact the agency themselves.
- Florida is offering one year of free monitoring through Sontiq, a TransUnion company, plus $1 million in identity theft insurance.
What happened in the Florida DMV data breach?
The target was DAVID, the Driver and Vehicle Information Database. Police and authorized government agencies use it to look up Florida driver and vehicle records. FLHSMV says it learned of the intrusion on 4 September 2026 and blamed an unnamed “international cybercriminal organization.”
The way in was not exotic. According to the state, the attacker used the credentials of a single Plant City Police Department user, which were “improperly housed on the employee’s personal electronic device,” as The Record reported. Plant City is a small city outside Tampa. It’s a bit like a records office master key getting copied onto someone’s home keyring.
ShinyHunters gave a different account. As BleepingComputer reported on 11 September 2026, the group said it used a password-reset flaw to get into several DAVID accounts, including ones belonging to DMV employees and an FBI agent. It also said it began working through DAVID record IDs on 3 September and downloading the pages and images. As proof, it posted a screenshot of a record it said belonged to Jeffrey Epstein. FLHSMV has not confirmed the password-reset story.
Why are former Florida residents getting alerts now?
On 16 October 2026 FLHSMV published a public notice. It said letters would go out to current driver license and ID card holders who may be affected. It also issued a “substitute notice” for everyone else.
Substitute notice is a legal shortcut. Under Florida’s data breach law, section 501.171, an agency that cannot reach people by mail can notify them publicly. FLHSMV says it may not have current addresses for people who no longer hold a valid Florida license or ID, or who once titled a vehicle in the state.
So if you registered a car in Miami in 2015 and now live in Ohio, the state probably can’t mail you. You need to contact it yourself at customerinquiry@flhsmv.gov or through FLHSMV.gov/DataBreach.
What data was exposed, and what is still unconfirmed?
The state’s language is cautious. It says some data was “potentially affected” and that it has “no evidence” of misuse. Here is how the claims compare.
| Claim | Status | Who says so |
|---|---|---|
| Records accessed on 4 September 2026 | Confirmed | FLHSMV |
| Entry through one Plant City police login | Confirmed | FLHSMV |
| License and vehicle data, document images, other personal info | Potentially affected | FLHSMV notice |
| More than 200,000 records stolen | Claimed, not confirmed | ShinyHunters |
| Password-reset flaw used | Claimed, not confirmed | ShinyHunters |
| Data misused | No evidence so far | FLHSMV |
Two big questions are still open. The state has not said how many people are affected or released the date range of the access, according to USA TODAY Network reporting from 16 October 2026.
The phrase “document images” is the part to worry about. A license photo and signature are exactly what someone needs to get past an online identity check. A leaked password can be changed. Your face and signature can’t.
How to protect yourself after the Florida DMV data breach
- Claim the free monitoring. Use the code in your letter, or contact FLHSMV if you’re a former resident. It covers one year and includes $1 million in identity theft insurance.
- Freeze your credit. A freeze (a lock that stops new lenders from pulling your file) is free at Equifax (800-525-6285), Experian (888-397-3742) and TransUnion (800-680-7289).
- Pull your free reports at AnnualCreditReport.com and look for accounts you don’t recognize.
- Distrust “DMV” messages. Expect scam texts and emails that use this breach as bait. Go straight to FLHSMV.gov, not to a link someone sent you.
- Report fraud at IdentityTheft.gov, the FTC’s recovery site.
My opinion: a database that thousands of authorized users can reach is only as strong as its weakest login. The state hasn’t said whether that account used multi-factor authentication, and that’s the answer I’d most like to hear.
Who are ShinyHunters?
ShinyHunters is a data-theft and extortion group. It steals records and then demands payment to keep them off the internet. The Record lists past victims including Ticketmaster, AT&T, Carnival and McGraw Hill.
According to NBC News, as cited by the USA TODAY Network, the group set an 11 September 2026 deadline for Florida to pay. It later removed its references to Florida after FLHSMV published its statement.
What happens next
The Florida Department of Law Enforcement and the Florida Digital Service are still investigating, and the Attorney General’s office has been notified. FLHSMV has said it will release more information “at an appropriate time.”
Three things to watch for: a confirmed count of affected people, the dates the access covered, and any sign that the stolen records have been published or sold. Any one of them would change how serious this breach looks.
FAQ
Was my information in the Florida DMV data breach?
Current license and ID holders who may be affected are being notified by letter. If you’re a former holder or once titled a vehicle in Florida, email customerinquiry@flhsmv.gov or visit FLHSMV.gov/DataBreach.
Is the credit monitoring really free?
Yes. Florida is paying Sontiq, a TransUnion company, to provide one year of identity and credit monitoring plus $1 million in identity theft insurance.
Did hackers really steal 200,000 records?
That figure comes from ShinyHunters. FLHSMV has confirmed the breach but has not confirmed how many records were accessed or taken.
Your next step: if you have ever had a Florida license, ID or vehicle title, freeze your credit at all three bureaus before you do anything else.
1 comment