Threat Intelligence & APT SecurityWeek 1 week ago

Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System

CN
CyberNew Threat Research Desk
• Original Reporting: SecurityWeek
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"A cyberattack on Arizona’s court system stole personal information for more than a million people and is believed to have started when a court employee clicked a malicious link in an email. The Arizona Supreme Court said the information was copied for 1.3 million people with unpaid court fees, fines and restitution payments for traffic and criminal violations dating back as far as 30 years. Those..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)

A cyberattack on Arizona’s court system stole personal information for more than a million people and is believed to have started when a court employee clicked a malicious link in an email.

The Arizona Supreme Court said the information was copied for 1.3 million people with unpaid court fees, fines and restitution payments for traffic and criminal violations dating back as far as 30 years.

Those leading the attack also took records of nearly 30,000 active and inactive orders of protection and 150,000 reports dating back to 2010 from a foster care board that makes recommendations in cases where parents are alleged to be unfit or unable to care for a child.

The court’s technology staff shut down the attack on a backup server about two hours after spotting it on Sept. 24. Since then, the court has notified those affected by the breach.

“We don’t have any evidence it has been used or shared” after the attack, state Supreme Court spokesperson Alberto Rodriguez said Tuesday.

The attack, which is under investigation, hasn’t affected or delayed any court cases, Rodriguez said.

Advertisement. Scroll to continue reading.

Written By Associated Press

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from SecurityWeek.

Primary Advisory →