ShinyHunters claims Florida DMV breach, puts data on the clock
Summary
The extortion group ShinyHunters claims to have breached the Florida Department of Highway Safety and Motor Vehicles' Driver and Vehicle Information Database (DAVID), allegedly stealing over 200,000 records. They provided proof by leaking Jeffrey Epstein's sensitive information and have set a deadline for negotiation before releasing further data.
IFF Assessment
This article details a data breach and extortion attempt by a known threat group, which represents a negative development for defenders.
Defender Context
Defenders should be aware of the tactics used by threat actors like ShinyHunters, such as exploiting password-reset weaknesses and compromising employee accounts to gain access to sensitive government databases. This incident highlights the ongoing risk of large-scale data breaches from state-level entities, emphasizing the need for robust access controls and regular security audits.