Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System
Arizona courts say a phishing-linked attack exposed data on 1.3 million people plus sensitive case records.
Arizona’s Supreme Court says a cyberattack copied personal information on 1.3 million people tied to unpaid court fees, fines, and restitution going back as far as 30 years. The intrusion is believed to have begun when a court employee clicked a malicious email link. Attackers also took nearly 30,000 active and inactive protection orders and 150,000 foster-care board reports dating to 2010. Staff shut down the attack on a backup server about two hours after spotting it on Sept. 24; the court says it has no evidence the data was later used or shared, records were not altered, and court cases were not delayed.
- Employee clicked a malicious email link, starting the intrusion.
- Data covered 1.3 million people with unpaid fees, fines, or restitution.
- Attackers also copied about 30,000 protection orders and 150,000 foster-care reports.
- Staff stopped the backup-server attack about two hours after detecting it on Sept. 24.
- Court says records were not altered and cases were not delayed.
Full article215 words · extracted from securityweek.com · click to collapse
A cyberattack on Arizona’s court system stole personal information for more than a million people and is believed to have started when a court employee clicked a malicious link in an email.
The Arizona Supreme Court said the information was copied for 1.3 million people with unpaid court fees, fines and restitution payments for traffic and criminal violations dating back as far as 30 years.
Those leading the attack also took records of nearly 30,000 active and inactive orders of protection and 150,000 reports dating back to 2010 from a foster care board that makes recommendations in cases where parents are alleged to be unfit or unable to care for a child.
The court’s technology staff shut down the attack on a backup server about two hours after spotting it on Sept. 24. Since then, the court has notified those affected by the breach.
“We don’t have any evidence it has been used or shared” after the attack, state Supreme Court spokesperson Alberto Rodriguez said Tuesday.
The attack, which is under investigation, hasn’t affected or delayed any court cases, Rodriguez said.
Advertisement. Scroll to continue reading.
No records were altered or deleted, and the attackers didn’t steal information about jurors, witnesses or court employees.
Related: Attack on Vendor Affects Website of Arizona Court System
Text extracted automatically; images, tables and formatting may be missing. Original: https://www.securityweek.com/personal-information-for-over-1-million-people-stolen-in-a-cyberattack-on-arizonas-court-system/