Kootenai County, Idaho, experienced a ransomware data breach, which was detected on March 30, 2026. The county engaged third-party cybersecurity and data-forensics consultants to investigate the incident. The review of the incident was completed on July 2, 2026.
The exposed data included names, addresses, dates of birth, Social Security numbers, taxpayer identification numbers, driver’s license or state ID numbers, medical information, health insurance information, financial account/payment card information, and for a small number of people, biometric data such as fingerprints. The number of affected individuals has not been publicly disclosed. Idaho residents were notified beginning July 22, 2026.
While some law firms have announced investigations, no confirmed class action lawsuits against Kootenai County related to this specific breach were identified in the available sources. The Idaho Attorney General was notified after the county completed its review.