Attack Detected in March; County Issues Notifications
Kootenai County disclosed Wednesday that a ransomware attack on its computer network has potentially compromised sensitive personal information belonging to county residents, including Social Security numbers, driver’s license data, and biometric identifiers.
The intrusion was detected on March 30, but the county did not notify affected residents until July 29—a gap of nearly four months. Cybercriminals successfully extracted certain data from the county’s network during the breach, though officials have not publicly identified the attackers or disclosed the number of residents whose information was exposed.
Compromised data types include Social Security numbers, individual taxpayer identification numbers, and drivers’ license numbers. A small number of individuals may have had biometric identifiers—specifically fingerprints—accessed during the attack.
Kootenai County officials stated: “We take this matter very seriously because of our commitment to the privacy and security of all information.” The county also issued an apology, noting: “Please accept our apologies that this incident occurred.”
County Response and Investigation Underway
Following discovery of the breach, Kootenai County launched a formal incident investigation in partnership with third-party data forensics consultants. The county also notified federal and state authorities, including the Federal Bureau of Investigation, the Idaho Chief Information Security Officer, and the Idaho Attorney General.
To contain the damage and prevent future intrusions, the county has implemented several defensive measures. These include deploying enhanced security detection tools, conducting an enterprise-wide password reset across county systems, and implementing network monitoring using endpoint detection technology designed to identify and accelerate response to cyberattacks.
County officials have not disclosed whether a ransom demand was made or if any payment was required to recover encrypted data.
Assistance Available for Affected Residents
Residents who believe their information may have been compromised can contact a dedicated assistance line established by the county. The number is 1-866-200-0996. The line operates Monday through Friday from 6 a.m. to 6 p.m.
The breach represents a significant incident for North Idaho, where Kootenai County government systems serve as a repository for sensitive personal and financial records used by residents for vehicle registration, property tax assessment, court proceedings, and other essential services.
Ransomware attacks on government networks have become increasingly common nationwide, with criminal organizations encrypting critical data and demanding payment for decryption keys. When organizations refuse to pay, attackers often threaten to publicly release stolen information or sell it on dark web markets—a tactic known as “double extortion.”
The timing of the disclosure comes as North Idaho continues managing multiple public safety challenges. The Upper Smith Fire, currently in active containment operations in the region, has also prompted evacuation orders and resource coordination across county agencies.
What Comes Next
Kootenai County is expected to provide updates on the investigation as forensic analysis continues. Residents should monitor official county communications for additional guidance on protecting their personal information and for details on any free credit monitoring services that may be offered. The FBI and state authorities are also investigating the incident and may release additional findings as the probe develops.