Phishing Attack Steals Arizona Court Records, Including 150,000 Foster Care Reports
Summary
Attackers used a phishing link to access Arizona court system backups and copy sensitive records, including more than 150,000 foster care reports. The court says the incident is under investigation and has no evidence the files have been shared.
Key points
- A court employee clicked a malicious link in a phishing email, allowing attackers to access backup files.
- The copied files included records related to protective orders and foster care cases.
- More than 150,000 Foster Care Review Board reports, covering cases dating back to 2010, were copied.
- The reports may contain information about children, involved parties, case materials, findings, and recommendations; the court says they do not include addresses or telephone numbers.
- The court says it has no evidence so far that the data has been shared, and the investigation is ongoing with the FBI.
- The attackers and their motive have not been identified; no ransomware group has publicly claimed responsibility.
- The court is contacting people believed to be affected.
Article Details
- Victim Organization
- Arizona Supreme Court
- Incident Type
- Cyberattack involving a phishing email and theft of backup files
- Data Types Exposed
- Protective order records
- Foster care case records
- Foster Care Review Board recommendation reports, which may include information about children, names of involved parties, case materials, findings, and recommendations
- Affected Records
- More than 150,000 recommendation reports; the total number of affected individuals or other records was not specified.
- Operational Impact
- Attackers copied sensitive backup files. No other operational disruption is reported.
- Ransom Or Extortion
- The backups were kept for recovery after ransomware and other destructive incidents, but the article reports no ransomware deployment or extortion in this incident. No ransomware group publicly claimed responsibility.
- Claim Status
- confirmed