Florida DMV Investigates Data Breach Amidst Recent Cyber Incidents
Florida's Department of Highway Safety and Motor Vehicles (FLHSMV) announced on Friday that it is investigating a data breach, making it the second organization responsible for managing Americans' driver’s license information to report a hacking incident this month. This announcement follows a significant breach reported by IDscan.net, a vendor that scans driver’s licenses for private companies, which claimed that hackers had stolen 160 million IDs, including sensitive information from high-profile individuals.
While the two breaches do not appear to be directly related, they underscore the growing threat posed by cybercriminals who are increasingly leveraging advanced technologies to access sensitive personal information. The specifics of what data was compromised in the FLHSMV breach remain unclear. However, the department indicated that the breach was carried out by an international cybercriminal organization and that law enforcement agencies are currently investigating the incident. The FLHSMV has stated that the breach has been contained, but it is still uncertain how long the hackers had access to the system.
In a related incident, the cybercriminal group ShinyHunters announced on its dark-web site that the Florida DMV was among its latest victims. The group provided a deadline of September 11 for Florida to negotiate a fee to prevent the release of the stolen files. They included a sample file that allegedly contained an image of a driver’s license belonging to Jeffrey Epstein, a former Florida resident. NBC News was unable to verify the authenticity of this image, which purportedly included Epstein's Social Security number and other personal details.
Cleared for Release
After the FLHSMV released its statement, references to Florida were removed from ShinyHunters' website, which could indicate that negotiations were taking place between the state and the hackers. Ian Gray, vice president of intelligence at the threat monitoring company Flashpoint, noted that when a victim is removed from such listings, it often suggests that discussions regarding a potential payment have occurred.
The FLHSMV has not confirmed whether it is engaging in negotiations with ShinyHunters. Meanwhile, the FBI is also investigating the earlier breach involving IDscan.net, which had reported that an unauthorized third party may have accessed customer information stored in their cloud accounts. This series of incidents highlights the vulnerabilities that exist within systems that manage sensitive personal data and the ongoing challenges faced by organizations in safeguarding this information.
