MalwareGovernmentGovernmentRansomwareData EncryptedData ExfiltratedIdentity (basic)Government IDMediumContained

Gooding County, Idaho

bd_08d52b8e356cb9ba · schema v1 · pii pii-v2

Severity

Medium

Discovered

Mar 25, 2025

Filed

Jul 11, 2025

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

64%

Full breach record for Gooding County, Idaho →

Gooding County, Idaho, detected ransomware on its network between March 22 and March 25, 2025. The County engaged third-party forensic consultants and federal law enforcement. The incident involved the exfiltration of personal information, including names and government identifiers. The County notified the Idaho Attorney General and began sending individual notifications on June 16, 2025, offering complimentary identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

Mar 22, 2025

Begins

Mar 25, 2025

Discovered

Jul 11, 2025

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_58a3906a93933dcd2025-07-11Verified
Idaho State AGbd_fa91ed734e822ded2025-04-04 · +98dCandidate

Name: Gooding County, Idaho
norm: gooding county idaho
Domain: goodingcounty.org

Name: Gooding County, Idaho
norm: gooding county idaho
Domain: goodingcounty.org
Industry: Governmentllm

Discovered: Mar 25, 2025
Breach occurred: Mar 22, 2025 – Mar 25, 2025
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 11, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: provided notice to the Idaho Attorney General

During the incident: Conducted an enterprise-wide password reset
Enhanced password complexity requirements
Reviewed and analyzed malware detection capabilities
Strengthened restrictions for external access to County network and email
Continued cybersecurity training for all employees
Launched an investigation with assistance from nationally recognized third-party cybersecurity and data forensics consultants
Alerted federal law enforcement
Changes made: Conducted an enterprise-wide password reset
Enhanced password complexity requirements
Reviewed and analyzed malware detection capabilities
Strengthened restrictions for external access to County network and email
Continued cybersecurity training for all employees
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Idaho State AGApr 4 · first

Maine State AG+98d

Nebraska State AG+98d · this page

Pattern: first filing Apr 4 (ID), last Jul 11 (NE) — a 98-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/41f2c3c7-2b10-4efd-bd23-92cde5226f5b.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 11, 2025
Raw hash: 3d13cea76768b1e0a11786af433f0d9c0df76ba917ad6ea89248eb9b7f8719ce

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityGooding County, Idaho

Victim entityGooding County, Idaho

Incidentdiscovered Mar 25, 2025

Stated responseConducted an enterprise-wide password reset

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov