Washington State DOL Faces Lawsuit Over Alleged Driver’s License Data Exposure A class action lawsuit has been filed against the Washington State Department of Licensing (DOL), alleging a security flaw in its License Express website allowed unauthorized access to driver’s licenses and personal data. The lawsuit claims the glitch enabled thieves to redirect licenses, potentially exposing sensitive information. The DOL, however, disputes the allegations, stating it has found no evidence of a data breach. The agency has not provided further details on the nature of the alleged vulnerability or the timeline of the incident. The lawsuit highlights growing concerns over government data security, particularly in systems handling sensitive personal information. If proven, the incident could have significant implications for affected individuals, including risks of identity theft and fraud. No official response from the DOL on the lawsuit’s status or potential remediation efforts has been released. The case remains under investigation.

Washington State’s License Express System Allegedly Left Vulnerable for Years, Risking Identity Fraud and Voter Roll Integrity A tort claim filed by Washington resident William Black, represented by attorney Joel Ard, alleges that the state’s License Express system contained a known security flaw a "back door" as early as 2018, yet remained unaddressed until early 2025. The lawsuit, based on the Washington Data Breach Notification Act, suggests the state attempted to conceal the severity of the issue rather than rectify it, potentially paving the way for a class-action lawsuit. The Washington Department of Licensing (DOL) reportedly ignored red flags, including hundreds of driver’s licenses being redirected to single addresses and paid for with untraceable prepaid Visa cards. Despite these anomalies, the system remained exposed for years, raising concerns about identity theft and fraud. While the DOL maintains it has found "no evidence" of a direct data breach, critics argue the agency’s negligence endangers all Washingtonians. A driver’s license serves as a primary identity verification tool, and a compromised system could facilitate widespread fraud. Washington GOP Chairman Jim Walsh warned that the implications extend beyond privacy, as the state’s automatic voter registration tied to driver’s licenses could undermine the integrity of voter rolls. The DOL has 40 days to respond to the claim but has stated it takes fraud seriously and is reviewing the filing. The case highlights growing scrutiny over state-managed identity systems and their role in election security.

On January 30, 2024, the Washington State Department of Licensing reported a website spoofing scam that affected 997 Washington residents. The breach involved unauthorized access to personal information, including names and driver's license numbers, during the period from October 25, 2023, to November 20, 2023.

The IT system of the Washington Department of Licensing suffered a data security breach. The breach impacted POLARIS, an online web-based database that the agency stores information on licensed professionals. The compromised information includes information about different licenses and social security numbers, dates of birth, driver's license numbers, and other personal information of thousands of licensed professionals. The department has informed the affected professionals including drivers, accountants, lawyers, bail bonds agents, funeral directors, and home inspectors to remain alert for any suspicious activity.

Washington State DOL Faces Allegations of Prolonged Data Security Failure A tort claim filed against the Washington Department of Licensing (DOL) on March 3, 2026, alleges the agency knowingly left a critical security flaw in its License Express system unaddressed for years, potentially exposing the personal data of thousands of residents. The claim, represented by attorney Joel Ard of Ard Law Group on behalf of plaintiff William Black, asserts that the DOL was aware of the vulnerability as early as 2019 but failed to correct it until early 2025. The flaw reportedly allowed unauthorized access to sensitive information, including birth dates and Social Security numbers, with evidence suggesting hundreds of driver’s licenses were misdirected to fraudulent addresses between Labor Day 2018 and February 2025. Fraudulent transactions involved burner visas, prepaid cards, and fake email addresses, raising concerns about identity theft and broader misuse of compromised data. While the DOL has stated it found no evidence of a breach in the License Express service, critics argue the agency minimized the severity of the issue and delayed action. The claim further alleges the DOL downplayed notifications sent to affected residents, failing to fully acknowledge or rectify the problem. Internal records indicate the agency opened an investigation in 2019 but did not shut down the flawed system until 2025. The case has drawn attention to potential voter roll vulnerabilities, as compromised identities could impact automatic voter registration tied to driver’s licenses. The DOL has 40 days remaining to formally respond to the claim, with officials confirming they are still reviewing the allegations. The incident underscores concerns about state compliance with Washington’s data privacy laws, which apply to government entities.