Florida DMV database breach tied to compromised police-user credentials
SecurityUnverifiedUpdated:
Florida’s motor-vehicle agency confirmed a breach of its DAVID driver-record system. It says the access was contained but has not disclosed how many records were accessed or stolen.
A police user’s credentials cited as the access route
The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) says an international cybercriminal organization breached its DAVID driver database. According to the agency, the attacker used credentials belonging to a single Plant City Police Department user that had been improperly stored on the employee’s personal electronic device. FLHSMV says the breach was mitigated and is not ongoing. The agency has not confirmed ShinyHunters’ claim that more than 200,000 records were taken.
Before FLHSMV disclosed its findings, ShinyHunters had claimed it breached the DAVID database and took more than 200,000 driver records.
FLHSMV has reportedly confirmed a breach of the DAVID driver database and attributed the access to compromised credentials for one Plant City Police Department user.
The agency’s account identifies a specific alleged route into a government driver-record system, while leaving the number of records accessed or stolen undisclosed. Its stated access method also differs from ShinyHunters’ earlier claim of exploiting a password-reset flaw.
Sources
- BleepingComputerFlorida confirms DMV database breached via stolen police accountRead source →