Arizona court cyberattack exposed data of 1.3 million

A cyberattack on Arizona’s court system copied personal information belonging to 1.3 million people with unpaid court fees, fines or restitution payments. The attackers also accessed nearly 30,000 active and inactive protection orders and about 150,000 foster-care reports.

The payment records involve traffic and criminal violations dating back as far as 30 years, according to the Arizona Supreme Court. They include information about people who owed money to the courts.

The protection orders restrict contact or provide safeguards for people facing threats or abuse. The foster-care reports, dating back to 2010, came from a board that advises courts in cases involving parents alleged to be unable or unfit to care for a child.

Court technology staff detected the attack on Sept. 24 and shut it down on a backup server about two hours later. Investigators believe it began after a court employee clicked a malicious link in an email.

The court has notified people affected by the breach and is investigating. There is no evidence the information has been used or shared since the attack, according to Arizona Supreme Court spokesperson Alberto Rodriguez.

The attack did not delay or affect court cases. No records were altered or deleted, and the attackers did not access information about jurors, witnesses or court employees.