AccidentalGovernmentGovernmentMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

Idaho Department of Labor

bd_582951a285809d60 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 13, 2026

Filed

Apr 1, 2026

To disclose

19 days

Affected

1state residents only

Confidence

66%

Full breach record for Idaho Department of Labor →

Idaho Department of Labor reported that on March 13, 2026, an employee inadvertently emailed one claimant's PII (name, phone, driver's license, SSN) to an uninterested party. The claimant was notified same-day, offered credit monitoring info, and the recipient was asked to delete the data. Filed with Idaho AG on April 1, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 19 days

Mar 13, 2026

Begins

Mar 13, 2026

Discovered

Apr 1, 2026

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Idaho Department of Labor
norm: idaho department of labor
Domain: labor.idaho.gov

Name: Idaho Department of Labor
norm: idaho department of labor
Domain: labor.idaho.gov
Industry: Governmentllm

Discovered: Mar 13, 2026
Breach occurred: Mar 13, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 13, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1535 Unauthorized Access Cloud Storage
Threat actor: Internal
Regulator citations: Filed Notice of Potential Data Exposure with Idaho Attorney General Consumer Protection Division

During the incident: Informed the claimant that their personal information had been compromised
Notified the non-interested individual of the inadvertent disclosure and asked to delete the claimant’s information
Provided the claimant with information on credit monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 days(19 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2026/04/2026-04-01-Idaho-Department-of-Labor.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 1, 2026
Raw hash: 8560cdcc102924906ee1ea2a58e6e92707248abe5f3295aafa90195ac56e8b81

Reporting entityIdaho Department of Labor

Victim entityIdaho Department of Labor

Incidentdiscovered Mar 13, 2026

Stated responseInformed the claimant that their personal information had been compromised

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov