Cyberattack Steals Personal Information of 1.3 Million People From Arizona Court System
Summary
A cyberattack stole records affecting 1.3 million people with court debts, along with protection-order and foster-care records. The attack was stopped, and officials say they have no evidence the data was used or shared.
Key points
- The breach exposed information for 1.3 million people with unpaid court fees, fines, or restitution dating back up to 30 years.
- Attackers also took nearly 30,000 active and inactive protection orders and 150,000 foster-care board reports dating to 2010.
- The attack is believed to have begun after a court employee clicked a malicious email link.
- Court technology staff shut down the attack on a backup server about two hours after detecting it on September 24.
- The court has notified affected people; officials say they have no evidence the stolen information was used or shared.
- No court cases were affected or delayed, and no records were altered or deleted.
Article Details
- Victim Organization
- Arizona Supreme Court
- Incident Type
- Cyberattack involving theft of personal information, believed to have begun when a court employee clicked a malicious email link
- Data Types Exposed
- Personal information associated with unpaid court fees, fines, and restitution payments for traffic and criminal violations
- Records of active and inactive orders of protection
- Reports from a foster care board concerning cases where parents were alleged to be unfit or unable to care for a child
- Affected Records
- Information for 1.3 million people with unpaid court fees, fines, and restitution payments; nearly 30,000 active and inactive orders of protection; and 150,000 foster care board reports.
- Operational Impact
- Court technology staff shut down the attack on a backup server about two hours after spotting it. No court cases were affected or delayed, and no records were altered or deleted.
- Claim Status
- confirmed