A cyberattack on Arizona’s court system gave hackers access to the sensitive information of more than 1.3 million people, according to an updated FAQ from court officials reported by The Record. Federal and state investigators confirmed the attackers “accessed and copied backup court files.” The court says the format of the stolen files may make them hard for the hackers to read.
The breach hit the Fines/Fees and Restitution Enforcement (FARE) Program, which helps collect debts tied to traffic and criminal violations. Its data, going back 30 years, includes names, Social Security numbers and case numbers. Hackers also accessed more than 150,000 Foster Care Review Board reports dating back to 2010, including material on about 8,000 children currently in foster care, as well as records involving active and inactive protective orders. Investigators believe the attack began with a phishing email in which a court employee clicked a malicious link. The Arizona Supreme Court announced the breach on September 25, saying the attack began September 24 and continued until the court’s IT team shut the system down. No group has claimed it, and a court spokesperson said it did not involve ransomware and no ransom demand had been issued as of Monday.
The court says text messages will go out to people affected by the FARE breach and urged them to put holds on their credit lines. Breach notifications have also gone to the Department of Child Safety, attorneys representing parents, judges and Foster Care Review Board members. The court’s cybersecurity alert page has the current guidance.