Florida DMV hacked after police dept insecurely stored login info

The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has begun notifying victims impacted by a recent data breach of driver’s license and motor vehicle data, but not everyone whose information was stolen will receive an alert.

佛罗里达州公路安全与机动车管理局（FLHSMV）已开始通知近期驾驶执照和机动车数据泄露事件的受害者，但并非所有信息被窃者都能收到提醒。

In a notice posted Friday, FLHSMV confirmed that it took “immediate steps” after discovering that “a malicious actor accessed certain department records on September 4, 2026, using compromised credentials.” There’s “no evidence” that data has yet been misused, the department said, but law enforcement “determined the information potentially affected includes driver license and motor vehicle data, to include document images, and other personal information.”

在周五发布的一份通知中，FLHSMV 确认在发现“一名恶意行为者于 2026 年 9 月 4 日使用被盗用的凭据访问了某些部门记录”后，已采取了“立即措施”。该部门表示，目前“没有证据”表明数据已被滥用，但执法部门“确定受影响的信息可能包括驾驶执照和机动车数据，涵盖证件图像及其他个人信息”。

FLHSMV is sending out letters to everyone affected, offering victims one year of credit monitoring from Sontiq, Inc. However, the state acknowledged that it may not have current contact information for many former Florida residents whose data was still being stored. Those potential victims can confirm if their data was stolen by emailing FLHSMV at customerinquiry@flhsmv.gov, officials said.

FLHSMV 正在向所有受影响者寄送信函，为受害者提供由 Sontiq, Inc. 提供的为期一年的信用监控服务。然而，该州承认，对于许多数据仍被存储的前佛罗里达州居民，他们可能没有最新的联系方式。官员们表示，这些潜在受害者可以通过发送电子邮件至 customerinquiry@flhsmv.gov 向 FLHSMV 核实其数据是否被窃。

For all current and former Florida residents, FLHSMV recommended taking precautions, including monitoring financial accounts and reviewing credit reports for any suspicious activity. In a thread on the Florida subreddit, several Floridians confirmed that they had already taken officials’ third recommendation and placed “a fraud alert or security freeze with major credit bureaus.”

对于所有现任和前任佛罗里达州居民，FLHSMV 建议采取预防措施，包括监控财务账户并检查信用报告中是否存在任何可疑活动。在 Reddit 佛罗里达版块的一个帖子中，几位佛罗里达人证实他们已经采纳了官员的第三项建议，并向各大信用局申请了“欺诈警报或信用冻结”。

On a webpage describing the security incident, FLHSMV confirmed that an “international cybercriminal organization” was behind the breach but did not specify which group or how long they had access. Instead, officials claimed to have “promptly mitigated the breach, launched an investigation, and issued required notification to state authorities.”

在描述该安全事件的网页上，FLHSMV 确认此次泄露事件是由一个“国际网络犯罪组织”所为，但未说明具体是哪个组织，也未说明其访问时长。相反，官员们声称已“迅速缓解了泄露影响，启动了调查，并向州政府当局发出了必要的通知”。

Florida’s investigation is “ongoing,” officials said, but a cybercriminal group called ShinyHunters—which recently claimed credit for hacking the FBI—may have stolen the data. Last month, NBC Miami reviewed a dark web post in which ShinyHunters announced that it had hacked Florida’s DMV and given officials a September 11 deadline to negotiate a fee to stop leaks of the data.

官员们表示，佛罗里达州的调查仍在“进行中”，但一个名为 ShinyHunters 的网络犯罪组织（该组织近期声称对黑客攻击 FBI 负责）可能窃取了这些数据。上个月，NBC 迈阿密频道查阅了一篇暗网帖子，其中 ShinyHunters 宣布已入侵佛罗里达州车管所，并给官员们设定了 9 月 11 日的最后期限，要求协商一笔费用以停止数据泄露。

FLHSMV did not mention ShinyHunters in its announcement and did not answer NBC Miami’s questions about the dark web post. In their announcement, officials said they would post an update when more information is available to share publicly.

FLHSMV 在其公告中未提及 ShinyHunters，也未回答 NBC 迈阿密频道关于该暗网帖子的提问。官员们在公告中表示，当有更多信息可供公开分享时，他们会发布更新。

In Florida’s case, “a criminal actor gained unauthorized access to a department system” by acquiring the “credentials from an employee of a local Florida law enforcement agency, who improperly stored the credentials on an electronic device,” FLHSMV’s FAQ said.

在佛罗里达州的案例中，FLHSMV 的常见问题解答显示，“一名犯罪分子通过获取佛罗里达州当地执法机构一名员工的凭据，从而获得了对部门系统的未经授权访问”，而该员工将这些凭据不当地存储在了一台电子设备上。