Florida DMV breach traced to stolen police officer credentials
Florida’s Department of Highway Safety and Motor Vehicles confirmed a breach after a police officer’s personal device was compromised.
How the intrusion occurred
Investigators learned on September 4 that credentials harvested from a Plant City Police Department officer’s phone were used to log into the DMV’s systems. The officer works in Plant City, a suburb of Tampa.
Who’s behind it
Anthropic’s report says affiliates of the ShinyHunters group employed its AI models to scan for usable credentials and gain entry. Google’s incident‑response team corroborated that ShinyHunters members leverage Anthropic tools in their campaigns.
Impact and response
FLHSMV notified other Florida government agencies and enlisted the Florida Digital Service to help investigate. The breach’s scope remains under review, but the agency has warned that personal data stored in its systems could be at risk.
What organizations can do
- Enforce multi‑factor authentication for any remote access.
- Separate personal and work devices; enforce mobile device management.
- Rotate credentials regularly and monitor for anomalous logins.
- Audit use of AI‑driven tools that can automate credential harvesting.
- Coordinate with state‑level incident response teams for rapid containment.
Unconfirmed claims: ShinyHunters has publicly asserted broader victim lists—including Jack Henry, McKesson, and a medical‑device giant—but those statements lack independent verification.