Kootenai County, Idaho, has confirmed a data security incident involving ransomware that exposed residents’ personal information, including Social Security numbers. If you received a notice, understanding what was involved and what you can do now is important.
What Happened in the Kootenai County Data Breach
A timeline of the county’s ransomware incident
Kootenai County is a county government in northern Idaho that maintains records for residents across a range of services. According to the county’s public notice, on March 30, 2026, the county detected and responded to ransomware on its computer network. The county launched an investigation to determine what happened and what information may have been affected.
On July 2, 2026, the county completed its review of the affected data and began working to provide written notice to impacted individuals. On July 22, 2026, Kootenai County began mailing notification letters to those whose information was involved. The county reported that it notified the Chief Information Security Officer for the State of Idaho and the Idaho Attorney General, and indicated it would notify other appropriate state regulators.
What Information Was Exposed in the Kootenai County Breach
The categories of sensitive data involved
According to the county’s notice, the information involved may have included name, address, date of birth, Social Security number, individual taxpayer identification number (ITIN), driver’s license or state identification card number, medical information, health insurance identification number, and financial account or payment card information. For some individuals, a biometric identifier such as fingerprints was also involved.
This is an unusually broad and sensitive combination of data. Social Security numbers, taxpayer identification numbers, and driver’s license numbers can be used to open fraudulent accounts or file false tax returns, while medical and health-insurance information can enable medical identity theft. Biometric identifiers such as fingerprints are especially concerning because, unlike a password or account number, they cannot be changed. Reviewing the specific information listed in your own notice is the best way to understand your exposure.
Who Is Affected and What the Risks Are
Understanding your exposure as a resident
Affected individuals are those whose information Kootenai County maintained and whose data was involved in the incident. If you received a notification letter, your information was among the data the county identified during its review. Kootenai County established a dedicated toll-free assistance line at 1-866-200-0996, available 6 a.m. to 6 p.m. Pacific Time, Monday through Friday, excluding major holidays, for individuals with questions.
Because the exposed data includes highly sensitive identifiers, the potential consequences can extend well beyond a single fraudulent charge. Stolen identity data can circulate for years, so remaining vigilant over time — not just immediately after the breach — is an important part of protecting yourself.
What to Do If You Received a Kootenai County Data Breach Notice
Practical protective steps you can take today
If you received a notification letter, keep it for your records, as it may contain details specific to your situation and information about any protective services being offered. Consider enrolling in any complimentary credit monitoring offered, reviewing your bank and credit card statements for unauthorized activity, and requesting your free credit reports at AnnualCreditReport.com to check for unfamiliar accounts.
You may also consider placing a fraud alert or a credit freeze with the major credit bureaus, and, because medical and health-insurance information may be involved, reviewing the Explanations of Benefits from your health insurer for services you did not receive. Remain alert to phishing emails, calls, or texts that reference Kootenai County or the breach by name. Beyond these self-protective steps, you may have legal options, and speaking with a legal professional can help you understand your rights.
Frequently Asked Questions About the Kootenai County Data Breach
When did the Kootenai County data breach happen?
According to the county, ransomware was detected on its network on March 30, 2026. Kootenai County completed its review of the affected data on July 2, 2026, and began mailing notification letters on July 22, 2026.
What information was exposed in the Kootenai County breach?
The county reported that involved information may have included name, address, date of birth, Social Security number, individual taxpayer identification number, driver’s license or state ID number, medical information, health insurance identification number, and financial account or payment card information. For some individuals, fingerprints were also involved.
How do I know if I was affected?
If you received a notification letter from Kootenai County, your information was involved. If you have questions, the county established a dedicated assistance line at 1-866-200-0996.
Is Kootenai County offering credit monitoring?
Any complimentary protective services offered would be described in your individual notification letter. Review your notice for details and enrollment instructions.
Can I take legal action after the Kootenai County data breach?
You may have legal options if your information was exposed. A legal professional can review your situation during a free consultation and explain whether you may be entitled to compensation.
Where can I find the official information?
Kootenai County posted a public notice about the incident on its official website (kcgov.us), and the county’s notification letter is the authoritative source for your specific situation.
Contact Wilshire Law Firm About the Kootenai County Data Breach
If your personal information was exposed in the Kootenai County data breach, you may be entitled to compensation. Wilshire Law Firm’s nationally recognized, award-winning team is here to help you understand your rights.
We offer free consultations and free case reviews with a legal professional, and we are available 24/7. There are no fees unless you get paid.
Contact Wilshire Law Firm today to schedule your free case review and learn more about your options after the Kootenai County data breach.
