GoKawiilFLHSMV: DAVID driver database breached via stolen Plant City police credentials
Florida's Department of Highway Safety and Motor Vehicles confirmed the ShinyHunters extortion group breached its DAVID driver database on September 4, 2026, after the gang claimed to have stolen over 200,000 driver records. FLHSMV said the intruder used login credentials from a single Plant City Police Department account that had been improperly saved on the employee's personal device, contradicting ShinyHunters' claim that it exploited a password-reset flaw across multiple accounts.
GoKawiil's interpretation of the reporting above, not reported fact.
The mismatch between the agency's account and the hackers' description of how they got in raises questions about how thoroughly the breach has actually been scoped and contained. Because DAVID stores sensitive personal and vehicle data accessible to law enforcement nationwide, a single compromised credential exposing such a system underscores how personal device security practices by individual officers can create statewide risk.
- FLHSMV confirms a breach of its DAVID driver database traced to stolen Plant City Police Department credentials.
- ShinyHunters claims a password-reset exploit was used instead, and says it lost access as the flaw was patched.
- The number of records actually accessed or stolen has not been disclosed by the agency.
Yubico YubiKey 5 NFC Security Key — This breach traces back to login credentials stashed on a personal device "" exactly the weak point a hardware security key eliminates. The YubiKey 5 NFC plugs into USB-A or taps an NFC phone to approve logins, so an account can't be taken over with a stolen password alone. It's a pocket-sized upgrade for email, cloud, and password manager accounts.
See Yubico YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-11
Published there as: “Florida confirms DMV database breached via stolen police account”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.