---
title: "Data breach at Florida Department of Highway Safety and Motor Vehicles (FLHSMV)"
description: "The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) confirmed that an attacker accessed its DAVID database in early September 2026, using credentials stolen from a local police officer's account that had been stored on a personal device. A cybercriminal group claims to have stolen m"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-10-florida-department-of-highway-safety-and
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-10
dateModified: 2026-09-10
---
# Florida Department of Highway Safety and Motor Vehicles (FLHSMV)

Data breach — Critical

The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) confirmed that an attacker accessed its DAVID database in early September 2026, using credentials stolen from a local police officer's account that had been stored on a personal device. A cybercriminal group claims to have stolen more than 200,000 driver records, a figure the agency has not confirmed. DAVID records can include a driver's address, date of birth, Social Security number, driver's license number, and vehicle registration details. FLHSMV says the intrusion was contained and has notified the state Attorney General's office.

The combination of name, date of birth, Social Security number and address enables identity theft or fraudulent account opening in the victim's name.

| Fact | Value |
| --- | --- |
| Disclosed on | September 10, 2026 |
| Incident dated | September 4, 2026 |
| Sector | Public sector |
| Country | United States |
| Cause | Credential stuffing |
| Severity | Critical |
| Status | Confirmed |

## Exposed data

- Postal address
- Social security number
- Date of birth
- Customer ID
- Other personal data

## What you can do

- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Florida confirms DMV database breached via stolen police account](https://www.bleepingcomputer.com/news/security/florida-confirms-dmv-database-breached-via-stolen-police-account/) — Bleeping Computer
- [ShinyHunters hackers claim breach of Florida "DAVID" DMV database](https://www.bleepingcomputer.com/news/security/shinyhunters-hackers-claim-breach-of-florida-david-dmv-database/) — BleepingComputer
- [Florida says motor vehicle data breach tied to credentials stolen from officer's personal device](https://therecord.media/florida-shiny-hunters-motor-vehicle) — The Record from Recorded Future News
- [Florida database breached; Incident not ongoing, state agency confirms](https://www.wctv.tv/2026/09/10/florida-database-breached-incident-not-ongoing-state-agency-confirms/) — WCTV
- [ShinyHunters claims Florida DMV breach, puts data on the clock](https://www.csoonline.com/article/4220193/shinyhunters-claims-florida-dmv-breach-puts-data-on-the-clock.html) — CSO Online

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-10-florida-department-of-highway-safety-and
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees