Skip to content

One phishing email, two hours: how hackers got into Arizona's courts

Criminals copied more than 150,000 foster-care review reports and may have taken addresses linked to protective orders.

By IQGov Editors

Cybersecurity, Report. 28 September 2026, 3 min read

A judge's gavel on a wooden desk in a courtroom
Photo: Pexels, Pexels License

Arizona's state court system was hit by criminal hackers who, court leaders believe, copied personal information about "many Arizonans". The courts published an urgent notice on 25 September.

How it started

The intrusion began on Thursday 24 September at around 11.30am, after a court employee clicked a malicious link in a phishing email, KJZZ reported. Court IT shut the attack down less than two hours after it was identified.

What was taken

The hackers copied more than 150,000 Foster Care Review Board recommendation reports dating back to 2010, along with other court records. Officials also believe names and addresses tied to current and expired protective orders may have been copied, according to AZFamily, the most worrying category, because those addresses are kept private to protect people at risk.

Chief Justice Timmer said the courts are working with the FBI's Arizona office. There is no evidence so far that the stolen information has been shared, and the Administrative Office of the Courts is contacting the people it believes were affected.

IQGov Editors

Research desk, Online

Stories by the IQGov research desk are written from public documents, official data and on-record statements, which are listed and linked at the end of each piece.

Keep reading

More Security

Liked this story? Get the Monday Briefing.

Weekly, free. Unsubscribe with one click.