Florida's DMV breach may reach further than first told

FLHSMV has issued a substitute breach notice: the September credential breach may have touched people who no longer hold a Florida license, ID, or title — people the state may not have current addresses for.

• The Sept. 4 breach used compromised credentials tied to a Plant City police employee.
• Potentially exposed: license and vehicle data, document images, other personal information; the state says no evidence of misuse so far.
• Letters are going out to current holders, with a year of free identity and credit monitoring through Sontiq.
• Former Florida license, ID, or title holders can check FLHSMV.gov/DataBreach.

The Florida Department of Highway Safety and Motor Vehicles issued a substitute data-breach notice on Friday, October 16 — a sign the September breach may reach people the state no longer has current addresses for: anyone who once held a Florida license or ID, or previously had a vehicle titled here.

Investigators say the September 4 breach used compromised credentials tied to a Plant City police employee, and potentially exposed driver license and vehicle data, document images, and other personal information. The state says there is no evidence of misuse so far.

Letters are going out this week to current holders who may be affected, with one year of free identity and credit monitoring and $1 million in identity-theft insurance through Sontiq, a TransUnion company. Anyone who ever held Florida credentials can check the details at FLHSMV.gov/DataBreach.