City of Boise data breach
The City of Boise in Idaho reported a data security incident on August 22, 2025, involving confidential municipal and employee information. This breach may have exposed sensitive personal details, and individuals who received a notification letter should understand their legal rights.
Docket sheet
- Company
- City of Boise
- Venue
- Idaho Attorney General
- Filed
- August 22, 2025
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurred
The filing does not state when the incident happened.
- 2
Reported to the Idaho Attorney GeneralAugust 22, 2025
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Home Address
- Banking and Financial Account Details
- Wage and Compensation Information
- Tax Record Information
- Driver's License or Government ID Number
Clerk's notes
The City of Boise, Idaho, filed a report concerning a data security incident on August 22, 2025. As a major municipal entity, the city collects and retains extensive personal data from its residents, business owners, and employees. This incident has raised significant concerns about the security of such sensitive information, with the breach currently under a "monitoring" investigation status.
The reported exposed data categories include Full Name, Social Security Number, Date of Birth, Home Address, Banking and Financial Account Details, Wage and Compensation Information, Tax Record Information, and Driver's License or Government ID Number. The compromise of these specific data types can lead to serious risks such as identity theft, financial fraud, and unauthorized account access for affected individuals. Employee payroll and human resources files, when compromised, also pose risks like fraudulent tax filings.
As a public agency handling protected personal data, the City of Boise is obligated under state laws, including the Idaho Identity Theft Act, to implement reasonable security measures. A data incident of this scale suggests potential failures in these foundational duties, possibly through inadequate network security or delayed system maintenance, thereby breaching the implicit trust placed in the city by the public.
Receiving an official data breach notification letter from the City of Boise confirms that your private information was indeed compromised. This notification serves as legal proof of an injury-in-fact, establishing the necessary standing to explore legal recourse, such as participation in a class action lawsuit against the municipality. You are not required to prove immediate financial loss to seek legal review; the increased risk of future identity theft and fraud is sufficient.
Given the nature of the exposed data, affected individuals are encouraged to remain vigilant by monitoring their financial accounts and credit reports. Understanding the full implications of this breach and your options is crucial. We are currently investigating potential class action claims on behalf of all individuals whose data was exposed in this incident and offer free case reviews to help you understand your legal position.
If a notification letter about this breach reached you, see every Idaho data breach on file or browse all cases.
Other Idaho docket entries
- Quantum ReserveIdaho AG—Monitoring
- Cassia School DistrictIdaho AG—Monitoring
- Gem Prep Meridian NorthIdaho AG—Monitoring
- Gem Prep PocatelloIdaho AG—Monitoring
- American Heritage Charter SchoolIdaho AG—Monitoring
- Gem Prep OnlineIdaho AG—Monitoring
- Gem Prep Twin FallsIdaho AG—Monitoring
- Gem Prep MeridianIdaho AG—Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.