Louisiana OMV Responds to Data Security Incident Affecting Driver and Vehicle Records

The Louisiana Office of Motor Vehicle (OMV) has addressed a significant data security incident affecting individuals with Louisiana driver's licenses, identification cards, or vehicle registrations.

Incident Details

On May 31, 2023, Progress Software Corporation, the developer behind the MOVEit managed file transfer platform, alerted global customers of a zero-day vulnerability. This breach allowed unauthorized access to and acquisition of data. Upon this discovery, the OMV immediately acted to secure the MOVEit environment used for file transfers. Investigations revealed unauthorized access to OMV files stored within the MOVEit environment.

Affected Information

OMV's thorough analysis indicates the exposed data encompasses personal information of those who applied for or were issued Louisiana driver's licenses, IDs, or vehicle registrations. Leaked details, varying per individual, could include:

• Name
• Address
• Date of Birth
• Social Security Number
• Driver’s License, Learner’s Permit, or ID Card Number
• Physical Attributes (height, eye color)
• Vehicle Registration Details
• Handicap Placard Information

Response and Next Steps

For affected individuals, OMV is sending emails for those with retrievable email addresses. They have also launched a dedicated, toll-free call center for inquiries. To further assist those impacted, OMV is providing 12 months of free credit monitoring and identity theft protection via LifeLock for Louisiana residents.

For comprehensive information on the incident and steps to access the free credit monitoring and identity protection, residents can visit https://nextsteps.la.gov/substitute-notice. Additional queries can be addressed at https://nextsteps.la.gov/ or by calling 866.861.8717.

Recommendations for Affected Individuals

OMV emphasizes the importance of vigilant monitoring for potential fraud and identity theft. Affected individuals should consistently check financial statements and credit reports for unauthorized activities. If any suspicious activities are detected, immediate contact with the relevant financial institution or credit bureau is crucial.

Prevention Moving Forward

In the aftermath of the incident, the OMV has put in place enhanced safeguards and technical security measures to further fortify and oversee the MOVEit environment, ensuring a similar breach doesn't recur.