[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB_vdFcIS-fTz9-p_A32RyXDdLFTknKl3keHbv6RSO1g":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":25,"status":26,"created_at":27,"published_at":28,"article":29,"tags":33,"podcasts":52,"controls":53},"88440384-a96e-415c-b1cb-2bcf6be0502e","stolen-police-credentials-expose-florida-dmv-driver-database","68f46ac1-ca10-4562-bbe1-50d1c771cd95","Stolen Police Credentials Expose Florida DMV Driver Database","Attackers gained access to Florida's DAVID driver database by compromising credentials belonging to a law enforcement employee, which were improperly stored on a personal device — a clear violation of credential hygiene and device management policies. This breach highlights the cascading risk of granting third-party or partner agency accounts access to sensitive government databases without enforcing strict authentication controls. The alleged exploitation of a password reset flaw compounds the issue, suggesting insufficient hardening of account recovery workflows. With over 200,000 driver records potentially exposed, this incident underscores how a single weak link in an interconnected system can lead to mass data exposure affecting civilians who have no choice but to share their information with government agencies.","**Immediate actions:**\n- Revoke and rotate all third-party and partner agency credentials with access to sensitive databases immediately following any suspected compromise.\n- Audit and disable password reset mechanisms that lack multi-factor verification or rate-limiting controls.\n- Enforce a policy prohibiting storage of government system credentials on personal or unmanaged devices.\n\n**Long-term improvements:**\n- Implement phishing-resistant MFA (e.g., FIDO2\u002Fhardware tokens) for all accounts with access to sensitive government databases, including partner agency accounts.\n- Establish a Zero Trust access model requiring continuous verification for all users accessing the DAVID database or equivalent sensitive systems.\n- Deploy Privileged Access Management (PAM) solutions to manage, monitor, and time-limit credentials issued to external agency personnel.\n\n**Detection measures:**\n- Enable real-time anomaly detection and alerting on unusual login patterns, especially for accounts originating from partner agencies or personal devices.\n- Maintain detailed audit logs of all database access events and review them regularly for signs of unauthorized or excessive data retrieval.\n- Conduct periodic access reviews to ensure partner agency accounts follow the principle of least privilege.",[12,13,14,15,16,17,18,19,20,21,22,23,24],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 5: Account Management","CIS Control 6: Access Control Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AC-17: Remote Access","NIST SP 800-53 IA-5: Authenticator Management","NIST SP 800-53 IA-12: Identity Proofing","NIST SP 800-63B: Digital Identity Guidelines (Authenticator Assurance Level)","NIST CSF PR.AC-1: Identities and credentials are managed","GDPR Article 32: Security of Processing (applicable for EU analog reference)","ITIL Service Transition: Change and Configuration Management","CJIS Security Policy Section 5.6: Identification and Authentication",{},"published","2026-09-11T20:20:34.102471+00:00","2026-09-11T20:20:34.007+00:00",{"id":7,"url":30,"slug":31,"title":32},"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fflorida-confirms-dmv-database-breached-via-stolen-police-account\u002F","florida-confirms-dmv-database-breached-via-stolen-police-account-a16d62","Florida confirms DMV database breached via stolen police account",[34,40,46],{"id":35,"name":36,"slug":37,"description":38,"color":39},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":41,"name":42,"slug":43,"description":44,"color":45},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",{"id":47,"name":48,"slug":49,"description":50,"color":51},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",[],[54,58,62],{"slug":55,"name":56,"problem":57},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",{"slug":59,"name":60,"problem":61},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":63,"name":64,"problem":65},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date."]