Florida DMV says it was hacked shortly after major driver’s license breach

The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that a DMV database was breached. According to reporting from BleepingComputer and Tampa Bay 28, the unauthorized access was made possible through the use of stolen credentials belonging to an employee of the Plant City police department. This security failure allowed attackers to penetrate the state's driver's license data systems. NBC News reports that this specific hacking incident occurred shortly after the state had already dealt with a separate, major driver's license breach, indicating a period of repeated vulnerability for Florida's transportation data infrastructure. Coverage of the incident is being driven by a mix of cybersecurity specialists and regional news outlets. BleepingComputer and CISO Series emphasize the technical nature of the breach and its place within a broader landscape of current cybersecurity threats, including AI whistleblowers and a zero-click WeChat worm.

Meanwhile, Tampa Bay 28 focuses on the local origin of the vulnerability, specifically naming the Plant City police employee credentials as the entry point used by the hackers. Florida Politics reports that state officials have not yet provided assurances regarding the safety of sensitive DMV data, highlighting a perceived lack of communication from the state government during this crisis. The urgency of the current situation is tied to a deadline imposed by the hacking group known as ShinyHunters. As reported by Florida Politics, this deadline is only hours away, adding significant pressure to state officials who have yet to offer guarantees about the status of the compromised sensitive data. This context suggests that the breach is not merely a past event but an ongoing extortion or data-leak threat. The fact that the breach occurred via police credentials underscores a critical weakness in how inter-agency access to sensitive state databases is managed and secured across different levels of law enforcement.

Future developments will depend on whether the ShinyHunters group follows through on their deadline and what specific data is leaked or recovered. According to the reports, the state has not yet provided the assurances demanded by the public or reported by Florida Politics. Observers will be watching to see if the FLHSMV implements new credentialing protocols to prevent further police-account-based intrusions. The timeline of these back-to-back breaches suggests an ongoing investigation into the state's cybersecurity posture and the specific vulnerabilities that allowed multiple breaches of driver's license data in a short window.