ShinyHunters Leaks Florida DAVID Vehicle Records After Breach
ShinyHunters leaked hundreds of thousands of Florida vehicle files after breaching DAVID with a police officer’s stolen credentials and demanding ransom.
Summary
On September 16, 2026, ShinyHunters published hundreds of thousands of files stolen from Florida’s DAVID vehicle and driver database. The group claims it breached DAVID earlier in September and released the files after the victim refused its ransom and cooperation demands. Florida motor vehicle agency FLHSMV confirmed the breach last week, saying attackers obtained a police officer’s credentials stored on a personal device. ShinyHunters offered a screenshot purporting to show a record linked to deceased sex offender Jeffrey Epstein, who had a Florida residence. FLHSMV had not commented further on the published data by September 16.
The stolen material includes hundreds of thousands of vehicle ownership certificates containing buyers’ and sellers’ names, addresses and vehicle identification numbers. A smaller subset contains Social Security numbers, non-U.S. passports and immigration documents, but reviewed files did not appear to include driver’s licenses or personal photos. The breach coincides with a separate September attack on identity verification company IDScan that exposed more than 150 million driver’s license images.
Positives
- Reviewed DAVID files did not appear to contain driver’s licenses or personal photos.
- Only a smaller subset of the stolen files contained Social Security numbers, passports or immigration documents.
- FLHSMV confirmed the breach and disclosed that a police officer’s credentials stored on a personal device enabled access.
Risks & concerns
- ShinyHunters published hundreds of thousands of files after its ransom and cooperation demands were rejected.
- Vehicle ownership certificates exposed buyers’ and sellers’ names, addresses and vehicle identification numbers.
- Some leaked files contained Social Security numbers, non-U.S. passports and immigration documents.
- A police officer’s credentials stored on a personal device provided access to Florida’s DAVID database.
- IDScan separately lost more than 150 million driver’s license images during the same month.
- FLHSMV had not provided further details about the published data or its next steps by September 16.