MalwareGovernmentGovernmentRansomwareData EncryptedCustomer Data InvolvedPIILowActive

Gooding County, Idaho

bd_fa91ed734e822ded · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 25, 2025

Filed

Apr 4, 2025

To disclose

10 days

Affected

Not disclosed

Linked

3 filings

Confidence

66%

Full breach record for Gooding County, Idaho →

Gooding County, Idaho, notified the Idaho Attorney General on April 4, 2025, of a ransomware incident detected on March 25, 2025. The County engaged legal counsel and a digital forensics firm to contain the incident and restore operations. The investigation indicates unauthorized acquisition of personal information. The County has notified federal law enforcement and plans to notify affected individuals, offering complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 days

Mar 25, 2025

Discovered

Apr 4, 2025

Filed

vs. sector median

9 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Nebraska State AGbd_08d52b8e356cb9ba2025-07-11 · +98dVerified
Maine State AGbd_58a3906a93933dcd2025-07-11 · +98dVerified

Name: Gooding County, Idaho
norm: gooding county idaho
Domain: goodingcounty.org

Name: Gooding County, Idaho
norm: gooding county idaho
Domain: goodingcounty.org
Industry: Governmentllm

Discovered: Mar 25, 2025
Materiality determined: —
Notification sent: Apr 4, 2025
Affected individuals: Not disclosed
Data types: PII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Idaho Attorney General Consumer Protection Division

During the incident: Began working with legal counsel and a nationally recognized cyber security and digital forensics firm, to contain the incident, securely restore operations, investigate the scope of the incident, and mitigate any resulting harm
Notified federal law enforcement of this incident and is cooperating with the investigation
Notified the ITS Chief Information Security Officer of this incident
Changes made: Providing written notice to affected individuals, together with an offer of complimentary credit monitoring where appropriate
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 days(10 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Idaho State AGApr 4 · first · this page

Nebraska State AG+98d

Maine State AG+98d

Pattern: first filing Apr 4 (ID), last Jul 11 (ME) — a 98-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2025/04/Gooding-Co-ID-AG-Notice120552382.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 4, 2025
Raw hash: 3976ec6c5de30bfe5bbe7446a1d111f944d6f47337d0c289eacddb1eae43acf3

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityGooding County, Idaho

Victim entityGooding County, Idaho

Incidentdiscovered Mar 25, 2025

Stated responseBegan working with legal counsel and a nationally recognized cyber security and digital forensics firm, to contain the incident, securely restore operations, investigate the scope of the incident, and mitigate any resulting harm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov