ShinyHunters hackers claim breach of Florida 'DAVID' DMV database
ShinyHunters claims to have breached Florida's 'DAVID' DMV database, stealing over 200,000 records. They released a screenshot of Jeffrey Epstein's DMV record, including address and registered vehicles.
Intelligence analysis by Qwen 2.5 (3B)
ShinyHunters, an extortion gang, claims to have breached Florida's DMV database, stealing over 200,000 records. They released a screenshot of Jeffrey Epstein's DMV record, including address and registered vehicles.
A group called ShinyHunters broke into a Florida government database that keeps information about drivers. They got over 200,000 records and showed a picture of a person's driver's license.
Analysis
{"heading_1":"The DAVID Database","subheading_1":"Description of DAVID","content_1":"DAVID is the 'Driver and Vehicle Information Database' platform operated by the Florida Highway Safety and Motor Vehicles (FLHSMV) agency. It is used by law enforcement and officials to look up information about a particular driver.","subheading_2":"Data Breach Details","content_2":"ShinyHunters claims to have breached DAVID through a password-reset flaw, compromising multiple accounts. They iterated through the records by IDs and downloaded associated HTML and images for the drivers, stealing over 200,000 data records since September 3rd.","subheading_3":"Threat Actor Tactics","content_3":"ShinyHunters uses social engineering attacks to target other states' DMV platforms. They have also conducted voice phishing (vishing) attacks targeting Okta, Microsoft, and Google single sign-on (SSO) accounts, impersonating IT support staff to trick employees into entering credentials and MFA codes."}
Key points
- ShinyHunters claims to have breached Florida's 'DAVID' DMV database
- They stole over 200,000 records, including personal information
- The breach was likely through a password-reset flaw
- ShinyHunters uses social engineering attacks to target other states' DMV platforms
This breach may lead to better security measures to protect government databases in the future.
Sensitive personal information could be leaked, putting drivers at risk of identity theft.
