Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System

The Arizona Supreme Court experienced a cyberattack initiated by a malicious email link clicked by an employee, leading to unauthorized copying of personal information for over 1.3 million individuals. The stolen data includes unpaid court-related financial records spanning 30 years, orders of protection, and foster care board reports dating back to 2010. The court's technology team detected and halted the attack on a backup server within two hours. There is no evidence that the stolen data has been used or shared. The breach did not impact court operations or result in data alteration or deletion.

Personal data of over 1.3 million individuals was exfiltrated, including sensitive court financial records, protection orders, and foster care reports. Although the breach involved a large volume of sensitive information, there is no current evidence of misuse or dissemination of the stolen data. Court operations remained unaffected, and no data integrity issues were reported.

The Arizona Supreme Court promptly detected and stopped the attack within two hours. Affected individuals have been notified. There is no indication that the stolen information has been exploited. Continued investigation is underway. Organizations should maintain vigilance against phishing attacks, particularly those involving malicious email links, to prevent similar incidents.