Local
Arizona courts say breach exposed millions of records after suspected phishing email
A cyberattack on Arizona’s court system copied information tied to 1.3 million people, along with records involving protection orders and foster-care cases. Court officials believe an employee may have opened a malicious email link; the investigation is ongoing.
PHOENIX — A cyberattack on Arizona’s court system exposed personal information associated with 1.3 million people and sensitive records involving protection orders and foster-care cases, the Arizona Supreme Court said Oct. 7.
Investigators believe the intrusion may have begun after a court employee clicked a malicious link in an email. The court detected the attack on Sept. 24 and shut it down on a backup server about two hours later.
The copied information concerned people with unpaid court fees, fines or restitution tied to traffic and criminal violations, with records dating back as far as 30 years. The attackers also took records connected to nearly 30,000 active and inactive orders of protection and about 150,000 reports from a foster-care board. Those reports, dating to 2010, involve recommendations in cases where parents are alleged to be unable to care for a child or unfit to do so.
“We don’t have any evidence it has been used or shared” since the attack, Supreme Court spokesperson Alberto Rodriguez said Tuesday. The court has notified people affected by the breach.
The incident remains under investigation. Rodriguez said court cases have not been delayed or otherwise affected, and officials reported that no records were changed or deleted. Information about jurors, witnesses and court employees was not taken, the court said.