Most of us hand over a lot of personal information to the DMV because we have no choice. Your address, birth date, driver’s license information and other identifying details can all end up in government systems. That is why a breach involving driver records deserves attention.

Florida officials have now confirmed that the Florida Department of Highway Safety and Motor Vehicles, or FLHSMV, experienced a data breach. The agency says it learned about the incident on Sept. 4, quickly mitigated it and has seen no further breach or ongoing unauthorized access.

The confirmation follows claims from the ShinyHunters extortion group that it accessed Florida’s Driver and Vehicle Information Database, known as DAVID, and stole more than 200,000 driver records.

Florida has not confirmed that record count or publicly said exactly what information was taken. Here’s what ShinyHunters claims happened, what Florida says its investigation found and what drivers should do now.

INSURANCE BREACH EXPOSES 7M DRIVER’S LICENSES

NEW! Join our upcoming CyberGuy LIVE class: Get Better Health Care With AI

In this free live online class, Kurt “CyberGuy” Knutsson will show you five practical ways AI can help you take a more active role in your health care. You’ll learn how to organize your health history, remember important appointment details, understand complicated medical information, research prescriptions and prepare questions for your next doctor’s visit. No technical

experience is needed.

Register for free now at CyberGuyLive.com

Florida confirms the DMV data breach

FLHSMV says its investigation traced the breach to credentials belonging to a single Plant City Police Department user. According to the agency, those credentials were improperly stored on the employee’s personal electronic device. A criminal actor was then able to take advantage of them.

That explanation gives us the first official account of how the breach occurred. It also differs from the access method ShinyHunters previously described.

FLHSMV says it notified the Florida Office of the Attorney General as required under state law. The agency is also working with the Florida Digital Service and Florida Department of Law Enforcement. The criminal investigation remains ongoing. Officials say additional information will be released at an appropriate time.

What ShinyHunters claims it stole from Florida

ShinyHunters says it stole more than 200,000 driver records from DAVID. BleepingComputer reported that the group provided a screenshot of a DAVID record belonging to Jeffrey Epstein as evidence that it had accessed the system. The screenshot reportedly contained an address, Social Security number, birth date, driver’s license information and registered vehicle details.

DAVID can contain far more than a person’s basic driver’s license information. Government records describing the system show that authorized users may have access to driver information, photographs, signatures, vehicle history, insurance information and other identifying records.

However, FLHSMV still has not disclosed how many records were accessed or stolen. The agency also has not confirmed ShinyHunters’ claim that more than 200,000 records were taken.

CyberGuy reached out to FLHSMV for additional comment, but did not hear back before our deadline.

Florida’s findings conflict with the hackers’ password-reset claim

ShinyHunters originally told BleepingComputer that it breached DAVID through a password-reset flaw. The group claimed that weakness allowed it to compromise multiple accounts, allegedly including accounts belonging to DMV employees and an FBI agent. ShinyHunters said it then moved through DAVID record IDs and downloaded associated pages and driver files beginning Sept. 3. The group later said it had lost access and believed the password-reset issue was being patched.

Florida’s investigation now points somewhere else. FLHSMV says the attacker took advantage of credentials belonging to one Plant City Police Department user that had been improperly stored on a personal electronic device. The agency has not backed ShinyHunters’ claim that a password-reset flaw allowed the group to compromise multiple accounts. So, for now, the password-reset explanation remains ShinyHunters’ version of events, while compromised police credentials are the access method Florida has publicly identified.

Why Florida’s DAVID database holds sensitive information

DAVID serves authorized government users rather than ordinary public searches. FLHSMV says its Bureau of Records manages access to driver records through DAVID for law enforcement and other approved entities. The agency also audits users for compliance.

Florida policy treats personal information in motor vehicle records as confidential. That information can include Social Security numbers, driver identification numbers, addresses and medical or disability information. That kind of information can give criminals powerful material for identity theft.

Imagine getting a call from someone claiming to represent a government agency. The caller already knows your address, birth date and driver’s license information. Suddenly, the scam sounds far more convincing.

IS YOUR SOCIAL SECURITY NUMBER ON THE DARK WEB?

ShinyHunters claims other state DMV systems are being targeted

BleepingComputer previously reported that a source said the attackers were targeting DMV platforms in other states through social engineering. ShinyHunters also told the outlet it expected additional DMV breaches to surface.

There has been no confirmation from Florida that the current breach involved other state DMV systems. Still, the possibility deserves attention because state motor vehicle agencies hold information that can be extremely valuable for identity fraud and targeted scams.

If criminals find a technique that works against one government system, they often look for similar access elsewhere.

Who is ShinyHunters?

ShinyHunters is an extortion operation associated with data theft attacks against companies and online services.

Threat actors using the name have been linked to attacks involving Salesforce environments and companies including Google, Cisco and Match Group.

More recently, the attackers have used voice phishing, also called vishing. In these attacks, someone impersonates IT support and tries to convince an employee to enter credentials or authentication codes into a phishing site.

The attackers have also targeted single sign-on accounts connected to services such as Microsoft 365, Google Workspace and Salesforce.

FLHSMV referred to the attacker in its statement only as an “international cybercriminal organization.” The agency did not publicly identify ShinyHunters by name. So, while ShinyHunters has claimed responsibility and Florida has confirmed a breach, Florida has not publicly attributed the attack to the group.

Still, this shows why protecting trusted accounts has become so important. Once an attacker gets legitimate credentials, other connected services may become accessible too.

8 ways to stay safe if your DMV data may be exposed

You do not need to wait for a confirmed case of identity theft before protecting yourself. These steps can make stolen personal information harder for criminals to use.

1) Freeze your credit

A credit freeze can make it harder for someone to open new credit accounts in your name. You need to place a freeze separately with Equifax, Experian and TransUnion. Credit freezes are free. You can temporarily lift one when you legitimately need a lender to access your credit.

2) Review your credit reports

Check your credit reports for new accounts or inquiries you do not recognize. You can request your reports through AnnualCreditReport.com, the federally authorized source for free credit reports. Also keep an eye on your financial accounts. Small unfamiliar transactions can sometimes be an early warning sign.

3) Be suspicious of Florida DMV messages

A confirmed breach creates a ready-made lure for scammers. You could receive a text, email or phone call claiming your Florida driver information was exposed. Be especially careful if the sender pressures you to verify personal information or click a link. Instead, visit FLHSMV through its official website at flhsmv.gov/ yourself.

FAKE SHINYHUNTERS SEXTORTION EMAIL USES CARNIVAL BREACH DATA

4) Use strong antivirus software

Scammers may use news of a DMV breach to send fake alerts containing malicious links or attachments. Strong antivirus software can help detect malware, phishing sites and other threats before they compromise your device or personal information. Keep your antivirus software running and updated on your computers and mobile devices. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

5) Protect your email account

Your primary email account deserves extra attention because criminals can use it to reset passwords for other services. Give it a strong, unique password and use a password manager to create and securely store it. Then turn on multifactor authentication. Whenever possible, consider an authenticator app or passkey rather than relying only on codes sent by text message.

6) Watch for identity theft

Review bank accounts, credit cards and other important services for activity you do not recognize. Also pay attention to unexpected government correspondence. A strange tax notice or benefits letter could signal that someone has used your identity.

You may also want to consider an identity theft protection service that monitors for suspicious use of your personal information and can help with recovery if your identity is stolen. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com

If you discover identity theft, report it at IdentityTheft.gov and follow the recovery steps provided by the Federal Trade Commission.

7) Reduce the personal information available about you

Data brokers and people-search websites can provide scammers with even more information about you. Removing that data cannot erase records stolen during a breach. However, reducing the information available elsewhere can make it harder for criminals to build a detailed profile and create convincing scams.

Consider using a personal data removal service to help find your information on data broker sites and submit removal requests on your behalf. These services can also keep checking for information that reappears over time. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

8) Verify any future breach notification

Now that FLHSMV has confirmed the breach, scammers could imitate any future notices sent to affected drivers. FLHSMV has not yet publicly disclosed how many people were affected or exactly what information was taken. Do not automatically trust an email simply because it mentions DAVID or the Florida DMV. Avoid using links in unexpected messages. Go directly to the agency’s official website to verify any notice.

Kurt’s key takeaways

Florida has now confirmed the breach, but some of the biggest questions remain unanswered. ShinyHunters claims it stole more than 200,000 driver records, while Florida says the attacker got in using credentials belonging to a Plant City Police Department user that were improperly stored on a personal device. What we still do not know is exactly how much information was taken or whose records were exposed. Until Florida releases more details, I would take this seriously. Check your credit, lock down your important accounts and be especially suspicious of unexpected DMV texts, emails or calls asking you to verify personal information.

If hackers stole your driver’s license record, Social Security number and address from a government database, how quickly would you expect the state to tell you? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
• Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Copyright 2026 CyberGuy.com. All rights reserved.

The Instax Pal 2 will launch in the US later this month for $169.95, according to PetaPixel, and uses a ⅓.06-inch sensor paired with an f/2.2 28mm lens to capture images up to 10-megapixels in size. That’s a big step up over the Kodak Charmera’s 1.6-megapixel sensor. The Pal 2 has an optical viewfinder and a 1.3-inch LCD screen on top for framing shots and is equipped with autofocus capabilities including optional face detection plus adjustable ISO, shutter speed, and exposure compensation.

Atop the Instax Pal 2 you’ll find a shutter button, a joystick, and a functional lever similar to what old film cameras used to advance to the next exposure. The camera pairs with Fujifilm’s mobile app where you can select and download image effects to the Pal 2 or upload images to your phone for printing using a wireless Bluetooth connection or a slide-out USB-C port. The camera also features a flash, a tripod mount, a self-timer, and a rechargeable battery good for up to three hours of use, Fujifilm claims.

Tesla’s Cybercab is finally carrying riders in Austin, Texas. And some of the details buried in the fine print may surprise you.

The gold two-seater has no steering wheel or pedals. Tesla says it uses cameras and AI to handle the driving, putting passengers entirely in the hands of its autonomous system.

Yet the Sept. 3 launch was unusually low-key for Tesla. The main presentation reportedly lasted about 15 minutes, and Elon Musk apparently did not speak. Then, on Sept. 4, federal safety regulators announced an investigation into how Tesla certified Cybercab for U.S. roads.

Tesla has spent years building toward this moment. Now that real riders are climbing inside, the little details suddenly become much more important. Here is what you should know before you step into a Cybercab.

ZOOX ROBOTAXI REDESIGN BRINGS BIG RIDER UPGRADES

NEW! Join our upcoming CyberGuy LIVE class: Get Better Healthcare With AI

In this free live online class, Kurt “CyberGuy” Knutsson will show you five practical ways AI can help you take a more active role in your healthcare. You’ll learn how to organize your health history, remember important appointment details, understand complicated medical information, research prescriptions and prepare questions for your next doctor’s visit. No technical

experience is needed.

Register for free now at CyberGuyLive.com

Tesla Cybercab has a surprising age limit

If you planned to call a Cybercab for a family ride, check the passenger rules first. Tesla says children under 13 cannot ride in Cybercab “at this time.” Teens ages 13 through 17 can ride, although an adult must accompany them for the entire trip.

Interestingly, Tesla sets a different age limit for the Model Y vehicles in its Robotaxi service. Children ages 8 through 17 can ride in those vehicles with an adult. Guests under 8 cannot.

So, an 11-year-old could ride in a Tesla Model Y Robotaxi but could not take the same trip in a Cybercab. Tesla does not explain the reason for that difference in its current rider guidance. Then there is another detail parents may notice.

Cybercab has no LATCH child-seat anchors

Tesla confirms that Cybercab has no LATCH or ISOFIX child-restraint system. If a rider needs a booster seat, Tesla says it must use a seat belt to secure it.

That may sound odd considering Cybercab does not allow children under 13. However, some older children may still need a booster seat depending on their size and local requirements.

Tesla gives instructions for using one, but there are no LATCH anchors to attach it to. It is the kind of detail most of us probably would not think about until a Cybercab showed up at the curb.

What happens if a Cybercab crashes?

A driverless vehicle still needs a plan for the moment something goes wrong. According to Tesla documentation, a collision can trigger several automatic responses. The airbags can deploy and the doors can unlock. Hazard lights and interior lights can also switch on.

The vehicle can disable its high-voltage battery, move the windows into a vent position and apply the brakes until it comes to a stop. Tesla’s system can also open a two-way connection with its Robotaxi Support team.

That support connection could become especially important in a vehicle where nobody can grab the steering wheel or hit the brakes. Tesla also gives riders ways to stop a trip themselves.

UBER LETS PARENTS WATCH TEEN RIDES LIVE

There is an emergency Stop button

Look above you when you get inside a Cybercab. Tesla placed a dedicated Stop button between the dome lights. Pressing it sends an immediate pull-over request, ends the ride and connects you with Robotaxi Support.

You can also tap Pull Over on the touchscreen or make the request through the Robotaxi app. However, Tesla warns that an “immediate” pull-over may still take some time. For example, the vehicle may need longer to reach a safe stopping point while traveling on a highway. That is worth knowing before your first ride.

Tesla made the manual door release easier to find

Tesla’s electronic door releases have attracted criticism because passengers may need a mechanical backup when a vehicle loses power.

Cybercab still uses electronically controlled doors during normal operation. In fact, the nearest door can open automatically when the ride requester approaches.

Inside, you can normally open the door through the touchscreen or gently lift a lever on the door panel. Pull that lever firmly all the way up, though, and it activates the mechanical release. Both Cybercab doors have one.

I like that Tesla put the emergency release where a passenger can actually see and reach it. There is one important warning. Tesla says using the mechanical release can damage the window or trim. If the vehicle has no power and the window remains fully raised, Tesla warns the glass could shatter when someone activates the release. That is one instruction I would want to know before an emergency.

Cybercab uses electronic braking

Tesla also made a major change underneath the vehicle. Cybercab uses a brake-by-wire system rather than a traditional hydraulic setup. Electronic actuators control the brake calipers instead of hydraulic lines carrying brake fluid.

Musk said in a post on X that electric brakes avoid the complexity of routing hydraulic plumbing around the vehicle. Tesla has already used steer-by-wire technology in the Cybertruck.

With Cybercab, passengers have no physical driving controls at all. That puts even more responsibility on the electronics and software to work properly every time.

Cybercab windows will not open all the way

Here is one of the stranger details Tesla included in its new rider guide. Cybercab passengers can lower the windows, but Tesla says they “cannot be fully opened at this time.” The company does not explain why.

The window switches also sit underneath the center touchscreen rather than on the doors. So, yes, you can crack a window for some air. You simply cannot roll it all the way down right now.

WAYMO RECALLS ROBOTAXIS OVER CONSTRUCTION-ZONE RISK

Cybercab packs USB-C charging

At least you should have somewhere to plug in your devices. Tesla confirms that Cybercab has USB-C charging ports inside the cabin.

An attendee at the launch reported that those ports can deliver up to 90 watts of power. That could be enough to charge many laptops.

However, Tesla’s current public rider guide does not list that wattage. So, I would treat the 90-watt figure as an early report until Tesla publishes the specification itself.

Federal regulators are already looking at Cybercab

On Sept. 3, the National Highway Traffic Safety Administration opened what it calls an Audit Query into Tesla’s certification that Cybercab meets all applicable Federal Motor Vehicle Safety Standards. NHTSA announced the action on Sept. 4 following the vehicle’s commercial deployment in Austin.

Automakers in the U.S. generally certify their own vehicles as complying with federal standards. NHTSA can then audit those certifications and investigate when questions come up.

Cybercab presents an unusual case because it has no steering wheel, pedals or mirrors. Many federal vehicle rules were written around cars designed for human drivers. NHTSA’s audit reportedly covers about 1,000 Cybercabs as the agency reviews how Tesla determined the vehicles comply.

That does not mean regulators have found Cybercab unsafe. It does mean Tesla now has to back up its certification with technical information that satisfies the agency.

What this means to you

If you get the chance to ride in a Cybercab, I would spend a minute learning the cabin before the car starts moving. Find the emergency Stop button. Know where the mechanical door release sits. Keep your seat belt fastened for the entire trip.

Tesla says every passenger must buckle up before the ride begins. Cybercab may pull over or cancel a trip if it detects improper seat-belt use. Parents should also pay close attention to the age rules. Cybercab and Tesla’s Model Y Robotaxi do not follow the same limits.

Beyond that, remember how new this vehicle is. Tesla is putting a very different kind of car into real-world service, and regulators are already asking questions about how it fits existing safety standards.

We have seen how unexpected situations can challenge other autonomous vehicles too. CyberGuy recently reported how Waymo recalled robotaxis over a construction-zone risk after vehicles entered closed freeway construction areas.

The technology can be impressive. Still, the real test comes when these vehicles deal with everything ordinary roads throw at them.

Kurt’s key takeaways

Cybercab is finally moving from Tesla’s big promise to something people can actually ride in. I like seeing safeguards such as the mechanical door release and emergency Stop button, especially when passengers have no steering wheel or pedals to grab. Still, the under-13 restriction, lack of LATCH anchors and windows that do not fully open caught my attention. Add the federal investigation, and Tesla now has something bigger to prove. Putting Cybercab on the road is one thing. Showing that people can trust it day after day is the real test.

Would you climb into a Cybercab today with no steering wheel or pedals, or would you want to see a longer safety record before trusting it with your ride? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
• Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Copyright 2026 CyberGuy.com. All rights reserved.