Threat Intelligence Brief
Curated summary with source attribution
Source: flhsmv.gov
Threat Risk: High
Victim: Florida Department of Highway Safety and Motor Vehicles
Incident: Data breach involving government motor vehicle records.
Impact: Potential exposure of personal identification information (PII) for Florida residents.
Attacker: Unidentified threat actors
Analysis: The FLHSMV has officially acknowledged a data breach affecting its systems. While the full technical details are limited, the announcement confirms a compromise of sensitive information. This incident underscores the persistent targeting of state-level administrative databases containing citizen PII.
Recommendations: Enable identity monitoring for affected individuals; Conduct a comprehensive audit of database access controls; Rotate administrative credentials and API keys
Source: flhsmv.gov
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source
Latest Developments
Update — 2026-09-11 22:11 UTC
Unauthorized access to the DAVID driver database leading to the theft of driver records. Potential exposure of sensitive personal and vehicle information for over 200,000 individuals. The breach occurred when attackers leveraged compromised police credentials stored on a personal device to access the DAVID driver database. While the state attributes the entry to credential theft, the ShinyHunters group claims a password reset flaw was exploited to gain access. This incident highlights the critical risk of insecure credential storage and the discrepancy often found between agency reports and attacker claims.
Corroborating source: bleepingcomputer.com
Update — 2026-09-14 00:33 UTC
Unauthorized access to the DAVID driver and vehicle database via compromised credentials. Potential exposure of PII for over 200,000 drivers, including Social Security numbers and addresses. The breach occurred after attackers compromised the credentials of a local police employee stored on a personal device. This provided unauthorized access to the restricted DAVID system, which contains sensitive PII. The incident underscores the critical risk of credential mismanagement across interconnected government systems.
Corroborating source: cubaheadlines.com
Update — 2026-09-14 17:21 UTC
Data breach resulting from compromised user credentials on a personal device. Unauthorized access to government data and an attempted extortion campaign. The breach originated from a Plant City Police Department user who stored credentials on a personal electronic device, which were then exploited by attackers. The threat actor, identified as ShinyHunters, attempted to extort the agency after stealing sensitive files. While the department claims the incident was mitigated, the breach highlights a critical failure in access control and device policy.
Corroborating source: floridatoday.com