MalwareGovernmentGovernmentRansomwareData EncryptedRansom DemandedPIILowContained

Kootenai County, ID

bd_8d6e4e0e8f43acbc · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 30, 2026

Filed

Jun 23, 2026

To disclose

12 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

66%

Full breach record for Kootenai County, ID →2 incidents on file

Kootenai County, Idaho, notified the Idaho Attorney General on June 23, 2026, of a ransomware attack detected on March 30, 2026. The incident involved unauthorized acquisition of personal information. The County engaged forensic investigators, notified federal law enforcement, and is offering credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 85 days

Mar 30, 2026

Begins

Mar 30, 2026

Discovered

Jun 23, 2026

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Washington State AGbd_24fa397b96201a692026-07-22 · +29dVerified
Vermont State AGbd_3a195c5b289e29342026-07-22 · +29dVerified

Name: Kootenai County, ID
norm: kootenai county id
Domain: kcgov.us

Name: Kootenai County, ID
norm: kootenai county id
Domain: kcgov.us
Industry: Governmentllm

Discovered: Mar 30, 2026
Breach occurred: Mar 30, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement

During the incident: Began working with legal counsel and a nationally recognized cyber security and digital forensics firm
Notified federal law enforcement of this incident and is cooperating with the investigation
Changes made: Securely restore operations
Investigate the scope of the incident
Mitigate any resulting harm
Providing written notice to affected individuals
Offer of complimentary credit monitoring where appropriate
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(85 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Idaho State AGJun 23 · first · this page

Washington State AG+29d

Vermont State AG+29d

Pattern: first filing Jun 23 (ID), last Jul 22 (VT) — a 29-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2026/06/2026.06.23-Kootenai-County.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 23, 2026
Raw hash: cc35a74fb0885943670213b3263df664e2f807d07024a3c416962cc342c46361

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityKootenai County, ID

Victim entityKootenai County, ID

Incidentdiscovered Mar 30, 2026

Stated responseBegan working with legal counsel and a nationally recognized cyber security and digital forensics firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov