Florida Confirms DAVID Driver Database Breach via Stolen Plant City Police Credential — Record Count Undisclosed

Summary

The Florida Department of Highway Safety and Motor Vehicles has confirmed that its DAVID driver database suffered a data breach, updating the unconfirmed claim covered in TTO-2026-0908-111. FLHSMV stated on September 11: "On September 4, 2026, FLHSMV learned of a data breach conducted by an international cybercriminal organization. The data breach was quickly mitigated and no further breach is occurring or ongoing." The agency's investigation determined that the attacker used compromised credentials belonging to a single Plant City Police Department employee, which had been improperly stored on the employee's personal electronic device. FLHSMV has not disclosed how many records were accessed or stolen, and has not confirmed ShinyHunters' claim that more than 200,000 driver records were taken.

Timeline

What Changed and What Remains Unresolved

TTO-2026-0908-111 stated FLHSMV had not confirmed a breach. That is no longer accurate. FLHSMV has now confirmed a breach occurred.

Two significant discrepancies remain. On access method: ShinyHunters claimed a password-reset flaw compromising multiple accounts including an FBI agent. FLHSMV found a single stolen credential from a Plant City Police Department employee stored on a personal device. These are materially different accounts, and neither has confirmed or denied the other. On scale: ShinyHunters claimed 200,000+ records. FLHSMV has not disclosed a number. The scope of the breach remains officially unconfirmed.

FLHSMV said it has notified the Florida Office of the Attorney General and is working with the Florida Digital Service and Florida Department of Law Enforcement. The investigation is ongoing.

Domain Intelligence

flhsmv.gov — 85.0

Score unchanged from TTO-2026-0908-111. flhsmv.gov scores at 85.0, consistent with established government domain posture. A high score and a confirmed breach can coexist.