- The ShinyHunters extortion group claims it broke into Florida’s Department of Motor Vehicles and stole sensitive records from the agency.
- The group used a purported DMV record belonging to convicted sex offender Jeffrey Epstein to back up the claim, setting a September 11, 2026 deadline for negotiations.
- Cybersecurity watchers say the claim is still unverified, and the sample raises more questions than it answers.
The ShinyHunters extortion group says it hacked the Florida Department of Motor Vehicles. The claim started spreading on social media on September 7. Cybersecurity account vx-underground reported that the group dropped a Florida DMV record belonging to Jeffrey Epstein as proof. Epstein was a convicted sex offender who died in 2019.
ShinyHunters listed the Florida DMV on its leak site. The group gave the agency a deadline of September 11, 2026, to begin talks. After that date, the group threatened to release the stolen data. Breach House also logged the Florida DMV as a ShinyHunters target on September 7.
What the Sample Shows
The sample the group released appears to come from Florida’s Driver and Vehicle Information Database, known as DAVID. DAVID holds sensitive records on drivers and vehicles across the state. The sample reportedly includes a photo, a signature, address details, driver’s license data, and vehicle records.
But the sample itself has raised red flags. TechNadu reported that the record ShinyHunters used as proof belongs to Jeffrey Epstein and links to an expired driver’s license. Having that record does not prove the group recently broke into Florida DMV systems. It only shows they have a record that may have been available through other means.
That is a key issue. Epstein-related documents that entered the public domain earlier contain Florida DAVID records and driver’s license details tied to him. Some of that information was already accessible through previously released material. So the sample ShinyHunters shared may not come from a fresh hack at all.
The sensitivity of DMV data is underscored by Meta’s reported licensing of facial recognition technology from Rank One Computing, a company that supplies tools to U.S. law enforcement and military clients, including the U.S. Marshals Service and the Pentagon.
Why Experts are Not Convinced
Several cybersecurity monitoring services have flagged the claim as unverified. GalaxyWarden described the Florida DMV listing as an unconfirmed allegation. The site noted that Florida has not publicly confirmed any breach or data theft. Matproof also reported that the claim has not been independently verified. It warned that ransomware leak site claims can involve exaggerated, misattributed, or recycled data.
The choice of Epstein’s record as proof made things even more unusual. Social media users began picking apart the details visible in the sample. Others questioned why identifying information was censored in the image, given that Epstein is deceased. The strange nature of the sample pulled more eyes to the story and added to the doubts swirling around it.
ShinyHunters is not a New Name in Cybercrime Circles
The group has carried out high-profile attacks in the past, including the Ticketmaster breach and the Santander Bank data theft. Both incidents saw stolen data appear for sale on dark web forums. The group’s track record means the Florida claim cannot be dismissed outright, but it also cannot be accepted without stronger evidence.
The incident lands against a wider backdrop of growing concern over driver’s license databases. Earlier in September, separate reports emerged of an alleged breach involving a large set of driver’s license records.
The FBI opened a probe into those reports. The IC3 also issued a public advisory around the same time. Identity data is increasingly valuable to cybercriminals, and DMV-style databases represent a rich target.
For now, the Florida DMV incident remains an unverified extortion claim. ShinyHunters produced a sample that contains what appears to be genuine Florida DMV data. But there is no independent proof yet of when the group got it, how they got it, or whether they actually broke into current DMV systems. Florida authorities have not confirmed a breach. No forensic evidence has surfaced to back the group’s story.
If September 11 passes without a larger data release or an official statement from Florida, the questions around this claim will grow louder. Until then, the public should treat this as an allegation, not a confirmed government data breach.
