Hackers Leaked Florida Car Records. Here's What Was Stolen
ShinyHunters has posted hundreds of thousands of files stolen from DAVID, Florida's statewide system for driver and vehicle information TechCrunch.
The group said it broke into DAVID earlier in September 2026 and put the files on its leak site after the victim did not pay a ransom or follow its demands. The release followed a short run-up. It first threatened to release Florida DMV records, then said it had more than 200,000 driver records, then posted what is now described as hundreds of thousands of files.
Florida's Highway Safety and Motor Vehicles agency, FLHSMV, said in September 2026 that DAVID was breached. The state agrees on which system was hit, but not on exactly how much was taken.
FLHSMV said the hackers used a police officer's username and password saved on a personal device. DAVID is not a public website. It is a private lookup tool for police. Approved users log in, and their job sets what they can see.
Most of the files are car ownership papers. They include hundreds of thousands of certificates with buyer and seller names and addresses, plus VINs, the unique number for each vehicle.
A smaller set had Social Security numbers, foreign passports and immigration papers. The files seen did not seem to have driver's licenses or photos.
To show access, ShinyHunters posted a screenshot it said was Jeffrey Epstein's DAVID record.
The broader context here is simple. One login can open a huge store of records. Thousands of officers and staff use DAVID for stops, cases and desk work. When a login lives on a personal phone or laptop without strong proof of identity and safety checks, others can borrow it. Think of it like a master key left in an unlocked drawer.
In my view, the fix is better locks, not just more training. Showing a famous person's record is a common way to get news coverage and push victims in ransom talks. Logins that expire fast, keys kept on safe hardware, checks that a device is approved, and alarms for very large searches would help. Criminals like title data because it is neat, correct and lasting. A name, address and VIN together can tie a person to a car and a sale. Missing licenses and photos blocks some fake ID use, but the risk for scams, stolen accounts and built-up fake identities stays. Harder to borrow and easier to shut off. That would make the next bulk leak less likely.
