INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Arizona Court System Exposed to Cyberattack Stolen Personal Data

| 2026-10-07 01:32 CRITICAL LOW DATA BREACH CYBERATTACK (GENERAL)
JSON
Executive Summary
AI-generated
A cyberattack on Arizona's court system resulted in the theft of personal information for over 1.3 million people, including those with unpaid court fees, fines and restitution payments dating back as far as 30 years. The attack is believed to have started when a court employee clicked a malicious link in an email, which was also linked to the theft of records from nearly 30,000 active and inactive orders of protection and 150,000 reports dating back to 2010 from a foster care board. The attackers copied sensitive backup files containing these records without stealing information about jurors, witnesses or court employees. Since being spotted on September 24, the attack was shut down by the court's technology staff on a backup server, but not before it affected over 1 million people and nearly 30,000 orders of protection.
Technical Mitigations AI-generated
• Network Intrusion Prevention (ATT&CK mitigation for Phishing): Network intrusion prevention systems and systems designed to scan and remove malicious email attachments or links can be used to block activity. • Restrict Web-Based Content (ATT&CK mitigation for Phishing): Determine if certain websites or attachment types (ex: .scr, .exe, .pif, .cpl, etc.) that can be used for phishing are necessary for business operations and consider bloc • Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope governmentgovernment
Incident Timeline
‎Sept. 24
The court's technology staff shut down a cyberattack on a backup server two hours after detecting it on September 24.
‎2026/10/07
Threat actors used a phishing email to target Arizona's Court System, resulting in the theft of personal information for approximately 1.3 million people with unpaid court fees and fines dating back up to 30 years.
organisation Arizona’s Court System
Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System.
organisation The Arizona Supreme Court
The Arizona Supreme Court said the information was copied for 1.3 million people with unpaid court fees, fines and restitution payments for traffic and criminal violations dating back as far as 30 years.
This is how the Arizona Supreme Court announced that hackers had attacked the state’s court system and stolen the personal information of “many Arizonans.”
organisation Arizona’s Foster Care Review Board
In an update, the court revealed that the attackers copied more than 150,000 recommendation reports created by Arizona’s Foster Care Review Board.
organisation Supreme Court
“We don’t have any evidence it has been used or shared” after the attack, state Supreme Court spokesperson Alberto Rodriguez said Tuesday.
organisation Rodriguez
The attack, which is under investigation, hasn’t affected or delayed any court cases, Rodriguez said.
organisation the Arizona Department of Child Safety
Those documents can include information about children, names of involved parties, case materials considered by the board, findings, and recommendations for courts, parents, and the Arizona Department of Child Safety.
organisation Identity Theft Protection
Malwarebytes Identity Theft Protection  monitors for all of it, alerts you fast, and comes with identity theft insurance.
Intelligence Sources
Malware Bytes 2026-09-30
SecurityWeek 2026-10-07