[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUJENwdZIylugkWIeHUZVgmcs3HKpsgeM5q7dT0GL7AQ":3},{"article":4,"iocs":51,"watch_terms":55,"solutions":56,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"68f46ac1-ca10-4562-bbe1-50d1c771cd95","Florida confirms DMV database breached via stolen police account","florida-confirms-dmv-database-breached-via-stolen-police-account-a16d62","The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that its DAVID driver database suffered a data breach, saying the attackers gained access using credentials belonging to a police department employee. [...]","The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) confirmed a data breach of its DAVID driver database, allegedly by the ShinyHunters extortion gang. Attackers gained access using compromised credentials belonging to a Plant City Police Department employee, which were improperly stored on a personal device. While ShinyHunters claimed to have stolen over 200,000 records and exploited a password reset flaw, FLHSMV stated the breach was mitigated and is investigating.","Florida DMV database breached by ShinyHunters using stolen police credentials.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fflorida-confirms-dmv-database-breached-via-stolen-police-account\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2024\u002F08\u002F16\u002Fdata-leak.jpg","2026-09-11T19:00:29+00:00","2026-09-11T20:00:30.86902+00:00",7,[17,20,23,26],{"name":18,"type":19},"DAVID","product",{"name":21,"type":22},"FLHSMV","vendor",{"name":24,"type":25},"ShinyHunters","threat_actor",{"name":27,"type":19},"Plant City Police Department","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":28,"icon":30,"name":31,"slug":32},null,"Breaches","breaches",[34,36,41,46],{"category":35},{"id":28,"icon":30,"name":31,"slug":32},{"category":37},{"id":38,"icon":30,"name":39,"slug":40},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":42},{"id":43,"icon":30,"name":44,"slug":45},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":47},{"id":48,"icon":30,"name":49,"slug":50},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[52],{"type":53,"value":24,"context":54},"malware","Extortion gang claiming responsibility for the breach.",[21,18,27],{"controls":57,"vendors":133},[58,86,115],{"slug":59,"name":60,"problem":61,"products":62},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":59,"product_name":83,"url":84,"description":85},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"slug":87,"name":88,"problem":89,"products":90},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[91,99,107],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"sailpoint","SailPoint","\u002Fvendor-logos\u002Fsailpoint.png","human-fabric","SailPoint Human Fabric","https:\u002F\u002Fwww.sailpoint.com\u002Fproducts\u002Fhuman-fabric","Identity governance platform, the successor to Identity Security Cloud: lifecycle management, access requests and continuous access reviews.",{"slug":116,"name":117,"problem":118,"products":119},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[120,125],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":121,"product_name":122,"url":123,"description":124},"intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",[],{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":152},"stolen-police-credentials-expose-florida-dmv-driver-database","Stolen Police Credentials Expose Florida DMV Driver Database","Attackers gained access to Florida's DAVID driver database by compromising credentials belonging to a law enforcement employee, which were improperly stored on a personal device — a clear violation of credential hygiene and device management policies. This breach highlights the cascading risk of granting third-party or partner agency accounts access to sensitive government databases without enforcing strict authentication controls. The alleged exploitation of a password reset flaw compounds the issue, suggesting insufficient hardening of account recovery workflows. With over 200,000 driver records potentially exposed, this incident underscores how a single weak link in an interconnected system can lead to mass data exposure affecting civilians who have no choice but to share their information with government agencies.",[139,140,141,142,143,144,145,146,147,148,149,150,151],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 5: Account Management","CIS Control 6: Access Control Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AC-17: Remote Access","NIST SP 800-53 IA-5: Authenticator Management","NIST SP 800-53 IA-12: Identity Proofing","NIST SP 800-63B: Digital Identity Guidelines (Authenticator Assurance Level)","NIST CSF PR.AC-1: Identities and credentials are managed","GDPR Article 32: Security of Processing (applicable for EU analog reference)","ITIL Service Transition: Change and Configuration Management","CJIS Security Policy Section 5.6: Identification and Authentication",{}]