Arizona Court Cyberattack Compromises Personal Data for 1.3 Million People Statewide

Queen Creek, Arizona — A major cybersecurity intrusion into Arizona's judicial computer network exposed confidential records belonging to approximately 1.3 million individuals with outstanding court debt after a court employee clicked a deceptive phishing link in an email. The unauthorized access targeted a secondary archival system maintaining records for the statewide Fines/Fees and Restitution Enforcement program, which assists courts in tracking unpaid traffic fines, criminal restitution balances, and court-mandated financial penalties accumulated over the past three decades.

State judicial administrators confirmed that the accessed archives also included records relating to nearly 30,000 active and inactive protective orders, along with more than 150,000 Foster Care Review Board Recommendation Reports dating back to 2010. The recommendation reports review dependency cases and provide recommendations regarding child welfare matters, though court leaders verified that ongoing foster proceedings and pending hearings will experience no disruptions.

Information technology personnel identified the breach on September 24 and isolated the impacted backup server within roughly two hours. Court officials indicated that the downloaded files were stored in a compressed format, leaving uncertainty regarding whether the cyber actors can interpret the underlying datasets, and confirmed that no official court filings were erased, modified, or corrupted during the incident.

> "We don’t have any evidence it has been used or shared." — Alberto Rodriguez, Arizona Supreme Court spokesperson

State Supreme Court spokesperson Alberto Rodriguez noted that docket schedules across Arizona remain normal and that the intrusion did not compromise private files pertaining to jurors, witnesses, or judicial personnel. Chief Justice Ann Scott Timmer conferred directly with federal law enforcement officials, including FBI Special Agent in Charge Rebecca Day, to coordinate a formal investigation into the security breach while notifying the Arizona Department of Child Safety and affected parties.

In Maricopa and Pinal counties, Queen Creek residents navigating municipal traffic citations or family court matters fall under the broader regional court administration connected to the state's centralized record databases. With the town's population exceeding 76,000 across the East Valley, local officials and court personnel routinely interact with statewide judicial systems that process civil enforcement and child welfare recommendations. Judicial leaders are advising Arizonans who suspect their records may be involved to place credit freezes with major reporting bureaus and monitor identity security resources.

Sources:

• Arizona Judicial Branch Cybersecurity Alert Hub: https://www.azcourts.gov/cybersecurityalert
• Associated Press: https://apnews.com/article/arizona-court-system-cyberattack-67a83df1d6c80cdf07ee2c208bf6e676
• GovTech: https://www.govtech.com/security/arizona-courts-cyber-attack-exposed-30-years-of-personal-data