Hackers Access and Copy Backup Files of Arizona Court System, Exposing 1.3 Million Records
What Happened – Federal and state investigators confirmed that criminal hackers breached the Arizona court system’s Fines/Fees and Restitution Enforcement (FARE) program and the Foster Care Review Board. The attackers copied backup court files containing names, Social Security numbers, case numbers and sensitive child‑care reports, affecting more than 1.3 million individuals.
Why It Matters for Trust & Control Assurance
- The incident illustrates a classic failure of user‑focused access controls and security‑awareness training—exactly the scenario a continuous control‑assurance program seeks to detect, document, and remediate.
- Continuous monitoring of privileged access and evidence of phishing‑resilience testing provide defensible audit trails that can demonstrate due‑diligence to regulators and stakeholders.
- Leveraging a security‑awareness capability helps embed phishing‑resilience into daily operations, reducing the likelihood of credential‑based breaches.
Who Is Affected – State‑level government courts, public‑sector agencies, and the 1.3 million Arizona residents whose personal and child‑care data were exposed.
Recommended Actions
- Map the breach to your organization’s “identity and access management” and “security awareness” control objectives; collect evidence of existing training, phishing simulations, and privileged‑access logs.
- Conduct a rapid gap analysis of backup‑file protection, least‑privilege permissions, and incident‑response playbooks; remediate any gaps and document the changes for audit readiness.
Technical Notes – Investigators say the attack began with a phishing email that an employee clicked, granting the adversary lateral movement to backup storage. Stolen data includes SSNs, case numbers, and over 150 k foster‑care reports dating back to 2010. No ransomware was deployed. Source: The Record