A “malicious actor” breached Florida driver license and department of motor vehicle data a month and a half ago, the Department of Highway Safety and Motor Vehicles only just reported Friday.
The department says an international cybercriminal organization used “compromised credentials” to access records on Sept. 4. The breach was mitigated, and the department is working with the Florida Digital Service and law enforcement in an ongoing criminal investigation.
The department says access was acquired using the “credentials from an employee of a local Florida law enforcement agency, who improperly stored the credentials on an electronic device.”
It is not clear why the department waited a month and a half to announce the breach.
There is currently “no evidence” that any driver’s license or motor vehicle data has been misused, but the department says it will notify those whose information may have been affected by mail. That is, only if they have their contact information.
If a Florida driver’s information is identified by the department as potentially affected, the driver will be sent a letter detailing how to enroll in a complimentary credit monitoring system.
Driver licenses data, motor-vehicle information, document images, and other personal information are among the items that could have been affected.
Potential victims can also confirm if their data was stolen by emailing FLHSMV at customerinquiry@flhsmv.gov, officials said.
After the breach, FLSHMV initiated “immediate security measures including blocking unauthorized access, resetting relevant user credentials, engaging cyber security professionals, and implementing additional safeguards to protect sensitive information.”
Precautions recommended by FLHSMV at this time include:
- Monitoring financial and online accounts for suspicous activity
- Reviewing account statements or credit reports regularly
- Placing fraud alert or credit freezes with major credit bureaus
- Using Federal Trade Commission resources available online
