HackingGovernmentTransportation & LogisticsGovernmentStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Idaho Transportation Department

bd_a99d0114456ac6af · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 3, 2025

To disclose

—

Affected

225state residents only

Confidence

66%

Full breach record for Idaho Transportation Department →2 incidents on file

The Idaho Transportation Department reported a supplemental update regarding a cybersecurity incident where an unauthorized person accessed a single email account between February 17 and February 19, 2025. The breach affected 225 Idaho residents, exposing names, addresses, and social security numbers. Five records contained credit card or banking information. The department secured the account, investigated the activity, and is mailing notification letters on April 3, 2025, offering one year of complimentary credit monitoring through Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 17, 2025

Begins

Apr 3, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed225 affectedView incident

Name: Idaho Transportation Department
norm: idaho transportation department
Domain: itd.idaho.gov

Name: Idaho Transportation Department
norm: idaho transportation department
Domain: itd.idaho.gov
Industry: GovernmentllmTransportation & Logisticsllm

Discovered: —
Breach occurred: Feb 17, 2025 – Feb 19, 2025
Materiality determined: —
Notification sent: Apr 3, 2025
Affected individuals: 225state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Reported cybersecurity incident to the Office of the Attorney General on February 25, 2025Writing to update the Deputy Attorney General on the cybersecurity incident
Initial access: valid_credentials

During the incident: Took steps to secure the account
Began investigation within hours of securing the account
Searched and reviewed the emails and attachments contained in the email account
Mailing notification letters to the Idaho residents via United States First-Class mail
Offering the residents one year of complimentary credit monitoring, fraud consultation and identity theft restoration services through Experian at no cost to them
Provided a telephone number the letter recipients can call with any questions
Changes made: Taken steps to enhance the security of our email environment
Will continue to take steps to enhance the security of our email environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2025/04/ITD-Supplemental.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 3, 2025
Raw hash: 7db68d90f23151c20a352623c881473fc54c35cdbde83590d080206b5091c6c3

Reporting entityIdaho Transportation Department

Victim entityIdaho Transportation Department

IncidentUnauthorized Access

Stated responseTook steps to secure the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov