Arizona Court Cyberattack
Arizona Courts says that on 24 September 2026 attackers copied backup files holding information on approximately 1.3 million people in its Fines/Fees and Restitution Enforcement (FARE) programme. The dataset includes names, case numbers and Social Security numbers.
Copied material included more than 150,000 Foster Care Review Board reports dating to 2010 and active or inactive protective-order records. The court says FCRB reports contain no addresses or phone numbers.
Copied is not proven readable
FARE data was highly compressed. The court says there is no evidence it was accessed, readable or shared.
Evidence suggests an employee clicked a malicious email link. The attack was stopped less than two hours after identification.
Check through the court
FARE participants can use the official lookup to check whether their information was affected. Reach it through the Arizona Courts incident hub.
The court advises FARE participants to consider a credit freeze and links to IdentityTheft.gov.
What is not established
No misuse or complete copied-field inventory is established by officials. The FARE figure counts individuals, while the FCRB figure counts reports.
Sources: Arizona Courts hub; initial 25 September notice; official FARE lookup.
