Arizona Supreme Court Phishing Attack Exposes 1.3 Million Records
A phishing attack on the Arizona Supreme Court exposed data of 1.3 million people, including 30,000 orders of protection, before it was shut down.
The Arizona Supreme Court suffered a phishing cyberattack that led to the theft of personal data belonging to 1.3 million people, according to TechRadar. Threat actors copied information on individuals with unpaid court fees, fines and restitution payments tied to traffic and criminal violations dating back 30 years.
The attackers also stole almost 30,000 active and inactive orders of protection, along with around 150,000 reports dating back to 2010 from a foster care board. The court's IT team shut down the attack on a backup server roughly two hours after it was spotted on September 24, 2026. The affected individuals are now being notified.
Supreme Court spokesperson Alberto Rodriguez said there is no evidence the data has been used or shared. Court operations have not been disrupted, and records were not altered or deleted. The attackers did not steal information about jurors, witnesses, or court employees.
Earlier Incidents in Other Courts
In early September 2026, it was reported that Thomson Reuters suffered a similar incident in March. On November 21, 2025, the Georgia Superior Court Clerks' Cooperative Authority detected hackers attempting to break into its network.
Quick answers
How many people were affected by the Arizona Supreme Court phishing attack?
1.3 million people had their personal data compromised.
What types of data were stolen?
Information on unpaid court fees, fines and restitution payments for traffic and criminal violations dating back 30 years, almost 30,000 orders of protection, and around 150,000 foster care board reports from 2010.
Has the stolen data been used or shared?
Supreme Court spokesperson Alberto Rodriguez said there is no evidence the data has been used or shared.