The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has initiated the process of informing individuals who may have been affected by a security breach that compromised personal data related to drivers and vehicle records.
To address the situation, the department is providing one year of free identity and credit monitoring services, along with identity theft insurance coverage up to $1 million.
In a statement shared on Facebook and an official release last Friday, the agency confirmed that on September 4, a hacker accessed certain records using compromised credentials.
The investigation revealed that the compromised data includes driver’s license information, motor vehicle records, document images, and other personal details.
Immediate Measures and Notifications
FLHSMV has taken swift action to contain the breach and secure its systems against further unauthorized access.
Despite no current evidence indicating misuse of the data, the agency cautions that this does not guarantee the safety of all records.
To mitigate risks, authorities have begun notifying potential victims and offering identity protection measures.
Current Florida driver’s license or ID card holders whose data might be compromised will receive notification letters during the week following the announcement.
Who Might Be Affected?
The notification extends beyond current document holders. Former license or ID holders, as well as past vehicle owners with records in Florida, may also be impacted. However, updated mailing addresses might not be available for these individuals.
In compliance with Florida Statutes section 501.171, a substitute notice was issued to inform potentially affected parties of the breach and available protective measures.
This is particularly crucial for former Florida residents, including members of the Cuban community who obtained a driver's license, state ID, or registered vehicles while in Florida.
Protection Services and Recommendations
FLHSMV has partnered with Sontiq, Inc., part of TransUnion, to offer complimentary identity and credit monitoring for a year. The coverage includes up to $1 million in identity theft insurance to cover certain damages from fraudulent use of personal data.
It's important to note that this insurance is not an automatic payout but a coverage limit subject to terms and conditions.
The department has not detailed individual enrollment steps for the program nor confirmed automatic eligibility for all former Florida license holders.
Steps for Drivers and Consumers
Drivers should verify official communications, watch for suspicious activity, and use FLHSMV channels to check if their data is affected.
The department emphasizes not posting license numbers, banking, or personal details on social media for verification purposes.
For official information and guidance, visit FLHSMV.gov/DataBreach. Those who previously held Florida licenses or titles and have not been notified can email CustomerInquiry@flhsmv.gov.
Besides the announced free measures, FLHSMV advises regular monitoring of bank statements and credit reports for unusual activity. Consider setting up fraud alerts or freezing credit reports with major agencies if necessary.
Consumers can request credit reports through AnnualCreditReport.com, the official site for free reports from major national agencies. IdentityTheft.gov, a service by the Federal Trade Commission (FTC), offers guidance on responding to data breaches and identity theft.
Ongoing Investigation and Security Measures
The investigation is ongoing, in collaboration with Florida Digital Service and the Florida Department of Law Enforcement (FDLE).
The breach, publicly acknowledged in September, involved hackers accessing the Driver and Vehicle Information Database (DAVID), a sensitive database containing personal information of residents and car owners.
Hackers exploited credentials from a Plant City Police Department user that were improperly stored on a personal device. The breach was attributed to an international cybercriminal organization, ShinyHunters, who claimed to have obtained over 200,000 driver records.
Florida Data Breach: What You Need to Know
What personal data was compromised in the Florida data breach?
The compromised data includes driver's license information, motor vehicle records, document images, and other personal details.
Who is eligible for the free identity and credit monitoring services?
Current and former holders of Florida driver's licenses, ID cards, and vehicle titles may be eligible for the free monitoring services. However, automatic eligibility is not guaranteed, and affected individuals should verify their status.
How can affected individuals get more information about the breach?
Individuals can visit FLHSMV.gov/DataBreach for official information, or contact the department via email at CustomerInquiry@flhsmv.gov if they suspect their data may be compromised.