Not a law firm.We connect people affected by data breaches with independent attorneys.

Incident information

Was Your Information Involved in the Arizona Courts Data Breach? Learn About Your Options

Information about this incident and a simple way to see if you may qualify to be connected with independent attorneys.

What happened

On September 25, 2026, the Arizona Judicial Branch announced that the state's court system had been targeted by a cyberattack that began on September 24, 2026. According to the court, criminal hackers accessed and copied backup court files, and court IT staff shut the attack down less than two hours after it was identified. The court says evidence so far suggests the attack began with a phishing email that a court employee clicked, and that the FBI and state law enforcement are investigating.

According to the court's Cybersecurity Alert page and news reports, the copied data included:

Records of about 1.3 million people referred to the statewide Fines/Fees and Restitution Enforcement (FARE) program over the past 30 years, including names, case numbers and Social Security numbers
More than 150,000 Foster Care Review Board recommendation reports dating back to 2010
Records involving active and inactive protective orders

The court states that the data was copied from a backup server holding highly compressed information and that it has no evidence the data has been read or shared. It says no court records were deleted or altered and that no information about jurors, witnesses or court employees was copied. People referred to the FARE program are being notified by text message and through alerts added to mailed collection notices, and the court has published an online lookup tool. The court encourages potentially affected individuals to place a credit freeze or fraud alert with the three major credit bureaus.

As of the date of this page, we are not aware of any lawsuit filed over this incident.

If you were notified that your information was involved, you may want to understand your options. With your consent, the form below lets us share your information with independent law firms that may contact you.

DataBreachRelief.com is not a law firm and does not provide legal advice. With your consent, information you submit may be shared with one or more independent law firms. Submitting information does not create an attorney-client relationship, and no outcome is guaranteed.

Possible remedies

Possible remedies, if any, depend on the facts of your situation and the applicable law. No outcome or payment is guaranteed.

Official source

Read the original public notice or report about this incident (opens in a new tab):

https://www.azcourts.gov/cybersecurityalert

See if you may qualify

Were you notified about the Arizona courts cyberattack? See if you may qualify to connect with an independent attorney.

First nameLast nameEmail addressPhone (optional)State of residenceBriefly describe how you were affected (optional)

Optional. Please do not include Social Security numbers, dates of birth, account numbers, or medical details.

I agree to the Terms and Privacy Policy and consent to DataBreachRelief.com sharing my information with one or more independent law firms, who may contact me about my potential claim by email or phone. I understand this does not create an attorney-client relationship.Optional: I agree to receive calls/texts, including automated, from DataBreachRelief.com and partner law firms at the number provided. Consent is not a condition of service. Msg & data rates may apply. Reply STOP to opt out.

Thank you. Your information has been received. If a participating law firm is interested in your situation, they may contact you.

Sorry, something went wrong and your information was not sent. Please try again.

DataBreachRelief.com is not a law firm and does not provide legal advice. We are an independent information and referral service. Information you submit may be shared with one or more independent law firms that may contact you about your potential claim. Submitting information does not create an attorney-client relationship. Listing an incident does not mean a lawsuit has been filed, and no outcome is guaranteed. Attorneys who receive referrals may pay us a fee for advertising or lead services.