The Florida Department of Highway Safety and Motor Vehicles confirmed that a Plant City Police Department employee stored FLHSMV login credentials on a personal electronic device. A criminal actor obtained those credentials and used them to access state records without any technical exploit of Florida’s own systems.
Potentially exposed data includes driver-license information, motor-vehicle records, document images, and other personal information. FLHSMV states it has found no evidence that the information has been misused, though the absence of detected misuse does not guarantee that misuse will not occur.
Outside analysts, according to Ars Technica’s reporting, have linked the intrusion to ShinyHunters. The group reportedly posted a claim on the dark web, set a negotiation deadline, and then removed references to Florida from the post. FLHSMV has not confirmed this attribution, describing the responsible party only as an “international cybercriminal organization.” What the group’s removal of that post means remains unclear.
The department says it contained the breach and reset the relevant credentials. It also engaged the Florida Digital Service, the Florida Department of Law Enforcement, and other investigators. FLHSMV says no further unauthorized access is ongoing.
What Florida Residents Should Do Now
Former residents are especially at risk of missing their notification letter, since FLHSMV may not have a current mailing address on file.
FLHSMV is mailing notices to current driver-license and identification-card holders whose information may have been affected and for whom the department has a valid address. Former Florida residents may not receive a letter. If you previously held a Florida license, identification card, or vehicle title and have not received a notice, contact FLHSMV directly at [email protected].
Eligible individuals are being offered one year of complimentary identity and credit monitoring through Sontiq, a TransUnion company, along with up to $1 million in identity-theft insurance. Enrollment details should arrive with the mailed notice; the official breach page at flhsmv.gov/data-breach also provides information.
Monitor your bank accounts, credit-card statements, and other financial accounts for unfamiliar transactions. Consider placing a fraud alert or a security freeze with Equifax, Experian, and TransUnion. A freeze restricts prospective creditors’ access to your credit file until you lift it, making it harder for someone to open fraudulent accounts in your name.
Use only the official FLHSMV breach page and [email protected] for breach-related questions. Do not respond to unsolicited emails, texts, or phone calls claiming to offer breach assistance.
The incident shows how weak credential handling at one connected organization can expose sensitive records held by another government agency. A single set of improperly stored password vaults at a local police department provided access at state scale. FLHSMV says additional information will be released when appropriate; monitor flhsmv.gov/data-breach for updates.
