City of Sun Valley notified the Idaho Attorney General on April 2, 2024, of a data security incident discovered on March 20, 2024. An employee email account was subject to unauthorized access, likely via phishing, resulting in the unauthorized acquisition of personal information (PII). The City engaged legal counsel and a digital forensics firm, notified its CIO, and plans to notify impacted individuals with an offer of credit monitoring.