Elmore County data breach
Elmore County, Idaho, reported a data security incident on May 6, 2025, involving sensitive personal information entrusted to the municipal government. This breach includes Full Name, Social Security Number, and other critical data, potentially exposing residents to identity theft and financial fraud. Affected individuals receiving a notification letter may have grounds to seek legal review regarding the county's data protection practices.
Docket sheet
- Company
- Elmore County
- Venue
- Idaho Attorney General
- Filed
- May 6, 2025
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurred
The filing does not state when the incident happened.
- 2
Reported to the Idaho Attorney GeneralMay 6, 2025
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Government ID Number
- Address History
- Property and Tax Assessment Records
- Direct Deposit Account Details
- Wage and Compensation Information
Clerk's notes
Elmore County, Idaho, a municipal government body, formally reported a data security incident on May 6, 2025. This breach affects highly sensitive personal and financial information that the county is responsible for collecting and maintaining from its residents and employees. The incident is currently under monitoring, indicating an ongoing assessment of its full scope and impact.
The compromised information includes categories such as Full Name, Social Security Number, Date of Birth, Government ID Number, Address History, Property and Tax Assessment Records, Direct Deposit Account Details, and Wage and Compensation Information. The exposure of such extensive personal data creates significant risks, including potential identity theft, fraudulent financial transactions, and other forms of personal and financial harm for those affected.
As a local government entity, Elmore County holds a strict legal obligation to implement and maintain reasonable cybersecurity safeguards to protect the confidential data it collects from the public. This duty arises from Idaho data protection statutes and common law principles requiring public agencies to secure Personally Identifiable Information (PII) against unauthorized access and misuse. A data breach of this nature raises questions about whether these foundational security obligations were adequately met.
If you have received an official data breach notification letter from Elmore County, this serves as formal acknowledgment that your private information was compromised due to inadequate security measures. The receipt of this notice establishes a concrete injury and provides the necessary standing to pursue legal remedies. Affected residents do not need to experience actual financial fraud or identity theft to seek legal redress; the increased, imminent risk of future harm is sufficient under applicable law.
Understanding your legal options and rights is an important next step. It is advisable to review the details of the notification letter carefully and consider seeking an evaluation of your specific circumstances. Our firm is prepared to investigate the facts of this incident and offers a free case review to help individuals understand potential claims and remedies without any upfront cost.
If a notification letter about this breach reached you, see every Idaho data breach on file or browse all cases.
Other Idaho docket entries
- Quantum ReserveIdaho AG—Monitoring
- Cassia School DistrictIdaho AG—Monitoring
- Gem Prep Meridian NorthIdaho AG—Monitoring
- Gem Prep PocatelloIdaho AG—Monitoring
- American Heritage Charter SchoolIdaho AG—Monitoring
- Gem Prep OnlineIdaho AG—Monitoring
- Gem Prep Twin FallsIdaho AG—Monitoring
- Gem Prep MeridianIdaho AG—Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.