The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) disclosed this week a September data breach involving an international cybercriminal organization that may have accessed driver’s license records, motor vehicle information and other personal data.
According to FLHSMV, the breach occurred when a criminal actor gained access to a department system using credentials belonging to an employee of a local Florida law enforcement agency. The employee had improperly stored the credentials on an electronic device. The department said it learned of the breach Sept. 4 and took steps to block unauthorized access, launch an investigation and notify state authorities.
The department said the compromised system may have exposed driver’s license data, motor vehicle records, document images and other personal information. However, investigators have found no evidence that the information has been misused or that unauthorized access is continuing.
In response, FLHSMV reset relevant user credentials, implemented additional security safeguards and enlisted cybersecurity professionals to assess the incident. The department is coordinating with the Florida Digital Service and the Florida Department of Law Enforcement as part of an ongoing criminal investigation. FLHSMV has also partnered with Sontiq Inc., a TransUnion company, to provide one year of complimentary credit monitoring services to affected individuals.
Residents whose information is identified as potentially compromised will receive notification letters by mail if the department has a valid mailing address. The letters will include instructions for enrolling in the credit monitoring program.
The department said its investigation remains ongoing and that additional information may be released as new findings become available.
