Florida DMV Driver Database Breach: What It Means for You

TL;DR: Florida's Department of Highway Safety and Motor Vehicles confirmed its DAVID driver database was breached after the ShinyHunters extortion gang claimed access. The agency says the attacker used credentials belonging to a single Plant City Police Department user that were stored improperly on a personal device. The attackers claim a password reset flaw gave them more accounts.

👉 Check my digital footprint — free 30-second check →

BleepingComputer reported that the Florida Department of Highway Safety and Motor Vehicles (FLHSMV) confirmed a breach of DAVID, its driver database, after the ShinyHunters group claimed it had compromised the system. The agency's account and the attackers' account differ, which is common in extortion cases.

How the breach happened, according to each side

The agency: the attacker used compromised credentials belonging to one Plant City Police Department user, improperly stored on the employee's personal electronic device.
The attackers: they say they exploited a password reset flaw to reach multiple DAVID accounts, including DMV employees and an FBI agent.

What we do not know

The reporting we reviewed does not list which data fields were taken or how many drivers are affected. Treat any figure you see online as unconfirmed until the agency publishes notification details.

Lessons for everyone

The weak link was a login stored on a personal device, not sophisticated hacking. That is the same pattern behind most account takeovers: a reused or exposed credential. If you want to understand how stolen logins circulate, read stealer logs versus data breaches.

What Florida drivers can do

Be suspicious of any message about your licence, registration or a traffic fine that pressures you to pay through a link.
Watch for DMV-themed phishing. The fake FTC refund recovery scam shows how impostors use official-sounding language.
Use unique passwords and two-factor authentication on your email, since email is the reset path for everything else.
Bookmark what to do if your password was leaked for a fast response plan.

FAQs

Was my Florida driver's licence data stolen?

The agency has confirmed a breach of the DAVID database, but the reports we reviewed do not say which data fields or how many drivers were affected. Watch for an official notification.

How did attackers get into the Florida DMV database?

The agency says stolen credentials from one police department user were used. The attackers claim they exploited a password reset flaw.

Who is ShinyHunters?

ShinyHunters is an extortion gang that has claimed several large data thefts in 2026. It typically steals data and pressures victims to pay.

Before scammers use your details, see them first: check what is already public about you.

Curious what's already out there? Scan My Shadow checks a phone number and email across 1,500+ sources and sends a clear report — no guesswork, just facts. Start your scan.