Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System

Summary

A cyberattack on Arizona's court system resulted in the theft of personal information for over 1.3 million individuals with outstanding court fees, fines, and restitution payments. The breach, believed to have originated from a phishing email clicked by an employee, also compromised records related to orders of protection and foster care board recommendations. While the attack was contained within two hours, the court has begun notifying affected individuals, though there is no current evidence of the data being misused.

Full text

A cyberattack on Arizona’s court system stole personal information for more than a million people and is believed to have started when a court employee clicked a malicious link in an email. The Arizona Supreme Court said the information was copied for 1.3 million people with unpaid court fees, fines and restitution payments for traffic and criminal violations dating back as far as 30 years. Those leading the attack also took records of nearly 30,000 active and inactive orders of protection and 150,000 reports dating back to 2010 from a foster care board that makes recommendations in cases where parents are alleged to be unfit or unable to care for a child. The court’s technology staff shut down the attack on a backup server about two hours after spotting it on Sept. 24. Since then, the court has notified those affected by the breach. “We don’t have any evidence it has been used or shared” after the attack, state Supreme Court spokesperson Alberto Rodriguez said Tuesday. The attack, which is under investigation, hasn’t affected or delayed any court cases, Rodriguez said.Advertisement. Scroll to continue reading. No records were altered or deleted, and the attackers didn’t steal information about jurors, witnesses or court employees. Related: Attack on Vendor Affects Website of Arizona Court System Written By Associated Press Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights. More from Associated Press Trump Names National Intelligence Director Jay Clayton to Lead a New Federal AI Task ForceFTC is Investigating OpenAI and Anthropic Over Possible Risks to ConsumersTrump Says Top Tech Firms Have Signed Accord to ‘Self-Police’ AI DevelopmentOpenAI CEO Announces New AI Agent and Avoids Mention of Security Concerns at Developer ConferenceNew Mexico Jury Finds Facebook Liable for Deceiving Users About Privacy ProtectionsChina and US Agree to Establish AI Safety Channel and Continue Trade and Military TalksOpenAI Says Its Models Engaged With US Government Websites in New Model Misbehavior DisclosureAutonomous AI Hacks Raise Thorny Questions of Legal Accountability Latest News FBI Blames Contractor’s Missed Patch for ShinyHunters BreachFBI Arrests ‘Most Wanted’ Developer of Ploutus ATM MalwareApple to Tighten Full Disk Access Controls in macOS Amid AI RisksCybersecurity M&A Roundup: 39 Deals Announced in September 2026Long-Running NPM Malware Campaign Accumulates 40,000 Downloads8.8 Million Impacted by Data Breach at Denmark’s Central Person RegisterSocial Engineering Detection Moves Into the Live ConversationGoogle Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports Trending Daily Briefing NewsletterSubscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts. Webinar: Securing AI Agents, MCPs, and AI Automations October 7, 2026 Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice. Register Virtual Event: Zero Trust & Identity Strategies Summit 2026 October 14, 2026 Join as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction. Register People on the MoveChip Wentz has been appointed as SVP & CISO at Keurig Dr Pepper Inc.Lumen Technologies has named Kim Keever as CSO.Quantum Secure Encryption Corp. has appointed Joseph Hall as CIO.More People On The MoveExpert Insights AI Has Changed Attack Speed, Not Security Fundamentals As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals. (Joshua Goldfarb) Four Cyber Threats Harboring Big Plans for the Future - AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations. (Steve Durbin) Begin at the End: How to Enable Agentic Remediation Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk. (Nadir Izrael) “We Think the Security Control Is Working” Is No Longer Good Enough Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today. (Sravish Sridhar) This Key Will Self-Destruct: An Open Standard for Revocable API Keys Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default. (Matt Honea) Flipboard Reddit Whatsapp Whatsapp Email

Indicators of Compromise

• malware — phishing email

Entities