> Cause not stated in filing
Kootenai County, Idaho data breach investigation
Kootenai County, Idaho, reported a data breach to the Indiana Attorney General on July 22, 2026, following an incident on March 30, 2026. This security failure exposed sensitive personal data, including Full Name, Social Security Number, and financial details, placing affected individuals at significant risk of identity theft and fraud. Our firm is monitoring the incident to determine the scope of county liability.
- Filed
- July 22, 2026
- Regulator
- Indiana AG
- People affected
- Not stated
- File status
- Monitoring
What the filing confirms
- Kootenai County, Idaho reported the incident to the Indiana Attorney General.
- Information involved: Full Name, Social Security Number, Date of Birth, Government ID Number, Address History, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details.
Still unknown
- How many people were affected. The filing does not give a number.
- What caused the incident beyond the description in the filing.
- How the attackers got in, and whether basic safeguards such as multi-factor sign-in were in place.
Investigation notes
Kootenai County, Idaho, a local government entity responsible for vital public services and record-keeping, formally reported a data security incident to the Indiana Attorney General on July 22, 2026. The breach originated on or about March 30, 2026, raising questions about the county's data protection measures and the security of sensitive information entrusted to its care. County governments like Kootenai are foundational administrative bodies, making them prime targets for cyber threats.
The official filing confirms that the security incident exposed highly sensitive personal information. The categories of data involved include Full Name, Social Security Number, Date of Birth, Government ID Number, Address History, Wage and Compensation Information, Tax Return Information, and Direct Deposit Account Details. The exposure of this specific combination of identifying and financial data creates a significant and enduring risk of identity theft, financial fraud, and other harms for affected individuals.
Such incidents suggest potential weaknesses in an organization's security protocols. Public entities are legally obligated to implement robust administrative, physical, and technical safeguards to protect constituent and employee data. This includes measures like multi-factor authentication, network segmentation, and continuous monitoring. An unauthorized intrusion leading to data exposure warrants a thorough investigation into whether Kootenai County fulfilled its duty to safeguard private information.
Receiving a data breach notification letter from Kootenai County, Idaho, serves as a formal acknowledgment that your personal data was compromised. This notification establishes the legal basis for you to explore potential claims against the county for their alleged security failures. You do not necessarily need to show immediate financial loss, as the increased risk of future identity theft and the time spent monitoring your credit can constitute actionable harms.
Individuals who received notice from Kootenai County, Idaho, should remain vigilant by monitoring financial accounts and credit reports for suspicious activity. If your information was exposed, it's crucial to understand your legal options and how to protect yourself against long-term risks. Our firm is currently monitoring this ongoing situation and offers a free case review to help affected individuals understand their rights and potential next steps.
What our attorneys examine
A cyberattack does not excuse a company from protecting the information it holds. We look at whether Kootenai County, Idaho used reasonable security, how long it kept the data, and how quickly it told the people affected. Those questions decide whether a class action or individual claim is possible. Read more on how ransomware lawsuits work, or browse other incident files in Indiana.
Other open files in Indiana
- Bozeman School DistrictIndiana Attorney General · Filed date pendingCount not stated
- Bozeman School DistrictIN Attorney General · Filed date pendingCount not stated
- Teamsters Local 17Indiana Attorney General · Filed date pendingCount not stated
- Teamsters Local 17IN Attorney General · Filed date pendingCount not stated
- BankIndiana Attorney General · Filed date pendingCount not stated
- BankIN Attorney General · Filed date pendingCount not stated
Attorney advertising. An incident file reflects a public regulator filing and our review of it; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.