Florida Department of Highway Safety and Motor Vehicles (FLHSMV)

CriticalConfirmedPublic sectorSeptember 10, 2026

The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) confirmed that an attacker accessed its DAVID database in early September 2026, using credentials stolen from a local police officer's account that had been stored on a personal device. A cybercriminal group claims to have stolen more than 200,000 driver records, a figure the agency has not confirmed. DAVID records can include a driver's address, date of birth, Social Security number, driver's license number, and vehicle registration details. FLHSMV says the intrusion was contained and has notified the state Attorney General's office.

The combination of name, date of birth, Social Security number and address enables identity theft or fraudulent account opening in the victim's name.

Disclosed on: September 10, 2026
Incident dated: September 4, 2026
Sector: Public sector
Country: United States
Cause: Credential stuffing

Exposed data

Postal address
Social security number
Date of birth
Customer ID
Other personal data

You are only affected if you had an account or an order with this organisation.

What you can do

These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

Sources

Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact