The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed a significant data breach involving its Driver and Vehicle Information Database (DAVID). Unauthorized access was gained through compromised credentials belonging to an employee of the Plant City Police Department, which were improperly stored on a personal electronic device. ([tampabay28.com](https://www.tampabay28.com/news/region-hillsborough/plant-city-police-employee-credentials-led-to-florida-dmv-data-breach-flhsmv?utm_source=openai))
FLHSMV detected the breach on September 4, 2026, and promptly took measures to contain the incident. The department stated that there is no evidence indicating misuse of the accessed data. ([cbsnews.com](https://www.cbsnews.com/miami/news/florida-driver-license-data-brech-motor-vehicle/?utm_source=openai))
The cybercriminal group ShinyHunters has claimed responsibility for the breach, alleging they exploited a password-reset flaw to access multiple DAVID accounts, including those of DMV employees and an FBI agent. They claim to have stolen over 200,000 driver records, though FLHSMV has not confirmed these figures. ([sofx.com](https://www.sofx.com/florida-confirms-david-breach-traced-to-stolen-police-login/?utm_source=openai))
In response, FLHSMV is notifying affected individuals and offering one year of credit monitoring services. However, the department acknowledges that it may not have current contact information for all former Florida residents whose data was compromised.
This incident underscores the critical importance of stringent credential management and the risks associated with storing sensitive login information on personal devices. It serves as a reminder for law enforcement agencies and other organizations to enforce robust security protocols to safeguard sensitive data.