Cyberattack on Arizona Courts Affected Data of About 1.3 Million People
The Arizona Supreme Court confirmed an attack on the state court system. According to the court, attackers copied personal data of people referred to the FARE program.
Cyberattack on Arizona Courts affected the state court system and, according to the Arizona Supreme Court, may have exposed the personal data of approximately 1.3 million people. Court IT staff discovered the incident on September 24, 2026. The affected records are related to the Fines/Fees and Restitution Enforcement program, known as FARE.
The court confirmed that attackers copied personal data of people referred to the FARE program. The program concerns unresolved court-related financial obligations, including fees, fines and restitution in traffic and criminal cases. The records go back as far as 30 years.
Cyberattack on Arizona Courts Did Not Alter Court Records
According to information from the court, court records were not altered or deleted during the incident. The cyberattack also did not disrupt court proceedings or schedules. The systems or groups reportedly not affected include data on jurors, witnesses and court employees.
The scope of the incident was publicly clarified through October 6, 2026. The confirmed figure of approximately 1.3 million people makes this a large-scale data breach involving public judicial infrastructure. The nature of the records may pose a risk of fraud and identity theft, but the court has not yet confirmed specific cases of data misuse.
Verification for People in the FARE Program
The Arizona Judicial Branch operates an official online tool where people referred to the FARE program can check whether their data may have been exposed in the incident. In this way, the court allows people affected by records of financial obligations to the courts to check their status.
It has not been publicly confirmed which specific identifiers were in the copied files, or whether the attackers successfully decrypted or further shared the data. The perpetrator and motive for the attack are also unknown. The FBI is participating in the investigation.
Secondary reports claimed that the incident may have begun when an employee clicked a malicious link in an email. The court’s initial official announcement does not mention this cause, so it cannot be considered a confirmed explanation for the intrusion.
What Will Be Important to Watch
Further announcements from the Arizona Supreme Court should clarify the types of data affected and the notification process for affected individuals. The FBI’s findings regarding the attackers’ identities and whether the data left the compromised system or was misused will also be important.
Cyberattack on Arizona Courts is currently a confirmed case of personal data being copied, not a confirmed case of the data being publicly disclosed or misused. The court also has not stated that the incident involved ransomware or extortion.
Sources
- Arizona Supreme Court — Arizona Courts Experience Cyber Attack – Officially confirms the attack, the IT team’s response, suspected copying of personal data and the FBI’s involvement.
- Arizona Judicial Branch — Emergency Data Breach Notification Lookup – Confirms that the court established a verification tool for people referred to the FARE program whose data may have been exposed.
- Associated Press – Reports the clarified scope of approximately 1.3 million people, the types of records affected and that the records were not altered or deleted.
Verified and updated: 10/07/2026 06:20
