The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) released a statement on September 11, 2026 confirming a data breach of its DAVID (Driver and Vehicle Information Database) system. The agency says it learned of the incident on September 4, 2026, that the breach was quickly mitigated, and that no further breach has occurred or is ongoing.
FLHSMV’s investigation attributes access to compromised credentials belonging to a single Plant City Police Department user that were improperly stored on the employee’s personal electronic device. The agency notified the Florida Office of the Attorney General under section 501.171, F.S., and is partnering with the Florida Digital Service and the Florida Department of Law Enforcement. It has not published how many records or which data fields were accessed; the official record count is Undisclosed.
Earlier, the ShinyHunters extortion group claimed it breached DAVID and stole more than 200,000 driver records (attacker claim — not FLHSMV-confirmed), alleging a password-reset flaw and multiple accounts. FLHSMV’s published findings describe a single credential path instead. No reconciled victim tally. Primary: FLHSMV statement. Secondary: BleepingComputer same-day coverage.