Florida DMV Data Breach:
How Deep Does It Go?

Did the hackers get Jeffrey Epstein’s DAVID record?

Hackers using the name ShinyHunters displayed a screenshot they claimed came from Florida’s DAVID system
and belonged to the late Jeffrey Epstein.

Reports said the image contained highly sensitive identifying information, including an alleged
Social Security number, driver’s-license details and vehicle information.

Florida has confirmed a breach of DAVID. But the state has
not publicly confirmed that Epstein’s record was actually stolen or that
ShinyHunters obtained more than 200,000 records.

A separate breach reportedly exposed an enormous cache of driver’s-license scans

The Florida DAVID incident is not the only major identity-data story.
A separate breach involving IDScan.net exposed a massive collection of identity-document scans.
Reports tied the data to a cybercrime marketplace known as Nexus.

NBC also reported that stolen material from that separate incident allegedly included a driver’s license belonging to
Defense Secretary Pete Hegseth.

Reporting says some records contained images of the
front and back of identification documents.
That can be much harder to replace or secure than a password.

Read The Record’s IDScan Report →

What Florida has confirmed

FLHSMV says the attacker used compromised credentials belonging to a
Plant City Police Department user.
The state says those credentials had been improperly stored on the employee’s personal electronic device.

Florida says it learned of the breach on September 4, 2026,
quickly mitigated it and is working with the Florida Digital Service and FDLE.
The state has not publicly disclosed the confirmed number of records accessed or stolen.

Read the confirmed Florida account →

What is our information worth?

There is no single fixed price for a stolen identity.
The real risk increases when accurate pieces of personal information are bundled together.

A driver’s-license image combined with a person’s
name, photo, address, date of birth, identification number, vehicle information or Social Security number
can make identity theft, phishing and impersonation attempts far more convincing.

For someone required to register, a caller who already knows detailed government information could sound much more believable
while falsely claiming there is a warrant, missed registration requirement or payment due.

We have not established that the Florida DAVID breach caused particular registry scam calls.
That is one reason records about the incident and scam complaints matter.

How many affected DAVID records contained a Sexual Offender or Sexual Predator indicator?

That aggregate number has not been publicly released.
Public-records requests are being used to seek the number along with incident summaries,
audit information and records concerning impersonation scams.

Ask for the public records

Any concerned citizen may independently seek government records concerning this incident.
Florida state and local records can be requested under Florida’s public-records law.
Federal agency records are generally requested under the
Freedom of Information Act (FOIA).

Questions citizens could ask include:

• How many DAVID records were accessed?
• How many unique people were affected?
• How many affected records carried a Sexual Offender indicator?
• How many carried a Sexual Predator indicator?
• What non-exempt incident reports and audit findings exist?
• Have agencies documented impersonation or extortion scams targeting people required to register?

There is no need to request another person’s private identifying information.
Aggregate totals and appropriately redacted public records can help establish the actual scope.

Florida Public Records Guide →

Scam Warning

Never send money simply because someone calls claiming to be FDLE, a sheriff’s deputy,
police officer, probation officer or registry official.
Independently contact the agency through an official number.

Government impersonation scammers may already know personal details,
fake caller ID information and threaten arrest or other consequences in an attempt to pressure victims into paying.

Follow the reporting and official guidance

What we know as of September 17, 2026:
Florida has confirmed unauthorized access to DAVID.
The claim of more than 200,000 Florida DAVID records comes from ShinyHunters
and has not been confirmed by FLHSMV.
No public count currently establishes how many people on Florida’s registry were affected.
The separate IDScan.net breach demonstrates the wider scale of identity-document exposure
but should not be confused with the Florida DAVID incident.