University of Kentucky disclosed a data breach involving its OTIS Digital Driver’s License database. An unknown party exploited a website vulnerability between January 8 and February 6, 2021, acquiring a copy of the database containing usernames, passwords, and government-issued driver's license data. The breach was discovered during a penetration test in June 2021. The university fixed the vulnerability, disabled compromised passwords, and engaged forensic investigators.