237.7 million Americans hold a driver's license, and the DMV record behind each one is the base of their legal identity. States sell that data under federal law, vendors and police portals hold copies, and one stolen login can open the whole file. This briefing maps where driver data goes in every state and how BB2G locks it down.
States are shaded by identity theft reports per 100,000 residents. Each glow is a documented DMV breach, outage, insider fraud case or driver-data sale; red marks breaches that exposed driver records.
Recent breaches, outages, fraud cases and data sales, newest first.
The audit maps every system that stores driver and ID data in each state, and every buyer, vendor and network it flows to.
Insurers, employers, private investigators, resellers and data brokers buying under DPPA permitted uses.
Police and court access systems like Florida's DAVID, reached with officer logins.
Companies that print licenses, capture photos and verify identity documents.
Tax collectors and county clerks who issue licenses on the state's behalf.
Voter registrations checked against driver records and federal databases.
Tools like MOVEit that moved Oregon's and Louisiana's entire files.
The failures on this map repeat: a stolen login, an insider with a keyboard, a vendor with a copy, a buyer nobody tracks. Each one gets a control.
LATCHKEY FIDO2 keys for every officer, clerk and vendor login. A password on a personal phone can't open the file.
Unusual lookup patterns, like one account paging through records by ID, trigger a lockout and a review.
Test results need two staff sign-offs, so one employee can't sell a license.
Every sale is logged with the buyer, fields, legal basis, price and redisclosures.
Residents can see which agencies and buyers pulled their record and why.
When a buyer or vendor is breached, the state knows which records they held and notifies those drivers.
From the counter clerk to the card printer, the police portal and the data buyer, every handoff can leak or corrupt an identity. Move the sliders.
With BB2G, every handoff has a check that catches 99% of errors and stops the record instead of passing it on.
Rank 1 has the most identity theft reports per 100,000 residents (FTC, 2024). Select a column to re-sort.
Documented DMV and identity incidents and driver-data sales, newest first, each linked to its source.
Licensed drivers (2023), identity theft reports (2024) and every documented DMV incident or data sale in each jurisdiction.
How driver data escapes, and the controls that stop it.
Start with a read-only audit of who has the data, then lock the doors.
Authorize a read-only audit of the state's driver-data buyers, vendors and portal accounts.