ShinyHunters, a prolific extortion gang, claims to have breached Florida’s Driver and Vehicle Information Database (DAVID), used by law enforcement to look up driver records, and stolen data on more than 200,000 drivers. As proof, ShinyHunters published a screenshot of Jeffrey Epstein’s DMV record, showing address, Social Security Number (SSN), birth date, license details, and registered vehicles. The hacker group told BleepingComputer they exploited a password‑reset flaw to compromise multiple DAVID accounts, allegedly belonging to DMV employees and an FBI agent, then iterated through driver IDs to download associated HTML and images. They say access has since been cut off and the flaw is being patched. ShinyHunters also claim they are targeting other states’ DMV platforms via social engineering and expect to announce more breaches. Active since 2018, the ShinyHunters extortion gang is known for large‑scale data theft and extortion, associated with numerous major data‑theft and extortion incidents. Initially focused on Salesforce and other cloud SaaS environments, they’ve hit companies like Google, Cisco, Pornhub, and Match Group, often via third‑party integrators and stolen tokens. More recently they’ve adopted vishing and device‑code attacks against Okta, Microsoft, and Google SSO to hijack access to services like Microsoft 365 and Google Workspace. Despite multiple arrests tied to Snowflake, PowerSchool, and the Breached v2 forum, actors using the ShinyHunters brand remain active and dangerous. CTIX Analysts will continue to publish the most relevant and timely updates around threat actor activity and campaigns