Box Elder County Data Breach Exposes Personal Information of Over 80,000 Individuals

Box Elder County, Utah, reported that a data security incident earlier this year resulted in the exposure of sensitive personal information belonging to more than 80,000 individuals.

 

In a data security incident notice filed with the Office of Maine Attorney General, officials of Box Elder county said that on August 3, a ransomware attack was detected on the county’s internal network where threat actors infiltrated its internal network, stole confidential data and encrypted it with malware.

 

The county immediately launched an investigation, with assistance from external cyber security experts, to determine the scope of the incident. It also took steps to secure the affected network and notified relevant law enforcement authorities about the incident.

 

“ Through our investigation, we determined that there was intermittent unauthorised access to our network between May 6, 2025, and August 3, 2025. During that time, the cyber criminals took some County data, including public records. 

 

“Consistent with FBI guidance, the County refused to pay the cyber criminals any ransom to delete the data. As a result, some County data was posted online by the cyber criminals,” county officials said.

 

The compromised data included names and other personal information including Social Security Numbers. The filing with the Maine state regulator also states that county officials have identified at least 81,664 individuals impacted by the incident.

 

To strengthen security and prevent future incidents, county officials deployed enhanced detection and response tools, actively monitor the network, reset passwords enterprise-wide, tightened external access controls, and continue to evaluate additional cybersecurity measures.

 

Box Elder County has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general.

 

It has also offered one year of complimentary identity protection and credit monitoring services through IDX to all affected individuals.

 

x.com/DarkWebInformer/status/1955645491556798719

 

The Interlock ransomware group took responsibility for the cyber attack on Box Elder County, naming the county as a victim on its data leak site. The group claimed it had stolen 4.5 TB of data—more than 2 million confidential files—and threatened to release the information unless its ransom demands were fulfilled.