The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) began notifying individuals potentially affected by a personal data breach that compromised the security of driver and vehicle records.
The agency announced that it will offer a year of identity and credit monitoring free of charge, along with insurance of up to one million dollars for identity theft.
In a notice shared on Facebook and an official statement published on Friday, the agency confirmed that a malicious actor gained access to certain records of the institution on September 4 using compromised credentials.
According to the department, the investigation determined that the potentially affected information includes driver's license data, motor vehicle records, images of documents, and other personal information.
The agency assured that it took immediate measures to contain the incident and protect its systems against further unauthorized access.
"In this moment, the FLHSMV has no evidence indicating that the information has been used improperly", stated the agency in its notification.
However, the absence of evidence of fraudulent use does not mean that all records are free of risk.
For that reason, the authorities initiated the notification process and made identity protection measures available to potential victims.
The FLHSMV announced that it would send letters during the week of the announcement to current holders of Florida driver’s licenses or identification cards whose information may have been compromised.
One of the most important aspects of the new notice is that it is not limited to those who currently have valid documents in the state.
The institution acknowledged that there may also be individuals affected who no longer possess a valid driver's license or identification from Florida, as well as former vehicle owners whose titles were registered in the state.
In those cases, the department may not have the updated postal addresses necessary to send out individual notifications.
Therefore, in accordance with section 501.171 of the Florida Statutes, it was decided to publish a substitute notice to inform those individuals about the breach and the available measures.
This clarification is particularly important for those who previously resided in Florida and moved to another state or country, including members of the Cuban community who obtained a driver's license, a state ID, or registered vehicles during their time in the territory.
Having had any of those documents does not automatically mean that personal information has been compromised. The department recommends that those who had previous records and did not receive a letter contact the institution directly to request information.
As a protective measure, the FLHSMV announced a partnership with Sontiq, Inc., a company owned by TransUnion, to provide free identity and credit monitoring services for one year.
The offer also includes insurance of up to one million dollars for identity theft, aimed at providing coverage for specific damages related to the fraudulent use of personal information.
The figure does not represent an automatic compensation or a payment that all affected individuals will receive. It is a limit of insurance coverage, subject to the applicable conditions and requirements.
The agency did not provide specific details in the general statement about the individual steps for enrolling in the program nor did it confirm that anyone who has held a Florida license can automatically access those benefits.
The FLHSMV stated that it is working to implement new security measures aimed at reducing the risk of similar incidents, while the investigation into unauthorized access continues.
For drivers, the most important step is to check official communications, stay alert for any suspicious movements, and exclusively use the department's channels to inquire if their information is involved.
The organization is not asking people to post their license numbers, bank details, or personal documents on social media to verify if they were affected.
To obtain information and consult the official instructions, interested parties should visit FLHSMV.gov/DataBreach.
Individuals who previously held a license, an identification card, or a vehicle title from Florida and did not receive a notification may also write to CustomerInquiry@flhsmv.gov.
In addition to the free measures announced, the department recommends regularly reviewing bank statements and credit reports to identify any suspicious activity.
It also advises monitoring financial accounts and digital services, and considering the activation of a fraud alert or the freezing of credit reports with major credit reporting agencies.
Consumers can request their credit reports through AnnualCreditReport.com, the official authorized portal for obtaining free reports from the major national agencies.
Additionally, you can visit IdentityTheft.gov, the service provided by the Federal Trade Commission (FTC) that offers guidance on how to respond to data breaches and potential cases of identity theft.
The investigation into the incident is underway with the collaboration of the Florida Digital Service and the Florida Department of Law Enforcement (FDLE).
The attack had been publicly acknowledged in September when it was revealed that cybercriminals had managed to access the DAVID driver and vehicle information system, a database used by authorized agencies that contains personal information of residents and car owners.
According to the explanations provided at that time by the FLHSMV, the attackers took advantage of the credentials of a user from the Plant City Police Department that had been improperly stored on a personal electronic device.
The intrusion was attributed to an international cybercriminal organization. The group known as ShinyHunters publicly claimed responsibility for the attack and stated that it had obtained more than 200,000 driver records.
Related videos:
Filed under: