US — Ars Technica

Huge DMV data breach impacted current and former Florida residents

SecurityOctober 20, 20261 min read

Florida's motor vehicle agency (FLHSMV) is warning people that hackers used stolen logins to get into driver's license and vehicle records. Letters are going out, but not everyone whose data was taken will get one.

What happened

A hacker got into Florida's driver and vehicle records on September 4, 2026, using login details that had been stolen (called compromised credentials). The state found out and acted fast. Officials say there is no proof the data has been misused yet. Still, the stolen information may include driver's license and vehicle data, document images, and other personal details.

Key facts

Date of access: September 4, 2026
Data that may be affected: driver's license and vehicle data, document images, and other personal information
Free help offered: one year of credit monitoring from Sontiq, Inc.
Contact to check if your data was taken: customerinquiry@flhsmv.gov

Why some people may not get a letter

The state may not have current addresses or contact details for many former Florida residents whose records are still stored. Those people can email the agency to find out if their data was taken. Some residents said they got their letters only this week, even though the breach happened more than a month ago.

Why it matters

Driver's license records hold names, addresses, and pictures of documents. This information can be used for fraud, such as opening accounts in someone else's name. Officials advise everyone, current and former residents, to watch bank and card accounts, check credit reports for strange activity, and consider a fraud alert or security freeze with the major credit bureaus.

What to watch

Whether the state finds signs that the stolen data has been misused
Whether FLHSMV names the hacking group; it has only said it was an "international cybercriminal organization"
How many people are notified, and whether more former residents are reached

Glossary

FLHSMV: The Florida Department of Highway Safety and Motor Vehicles, the state agency that handles driver's licenses and vehicle records.
Sontiq, Inc.: A company that provides identity protection and credit monitoring services.

Tioli Releases Emergency Response Guide for 'Node2Shell'

Tioli said on the 26th that it had independently reproduced and verified the Node.js vulnerability 'Node2Shell (CVE-2026-111497)', disclosed on the 21st, and published a response guide. The flaw stems from a memory-handling error when decompressing Brotli-compressed data, and Node.js rates its severity as High. Patched versions 22.23.4, 24.22.1, and 26.12.1 were released.

Security전자신문Oct 26

Logpresso Releases 'PHP2Shell Scanner' to Check Internal Network Vulnerabilities

Logpresso has released a 'PHP2Shell Scanner' app that diagnoses the PHP remote code execution vulnerabilities known as PHP2Shell. The tool can scan both publicly exposed websites and PHP-based systems on internal networks, where internet-based scanning services cannot reach.

SecurityVnExpressOct 26

The Privacy Risks of "Always-Listening" AI Devices

AI-enabled devices such as smart speakers, smartwatches and smart glasses that are always ready to respond can collect data, raising privacy concerns. Global shipments of AI glasses reportedly jumped to 8.4 million in 2025 from 2.1 million in 2024, according to Omdia data cited by Reuters. Experts warn that bystanders may be monitored without owning any device, and that AI can interpret far more collected information than earlier voice assistants.