Box Elder County Data Breach Lawsuit Investigation
If you received a data-breach letter dated December 17, 2025 from Box Elder County, you may be entitled to free identity-protection services and potential compensation. Use the form on this page for a no-cost, confidential case review.
What Happened?
Box Elder County, Utah (Box Elder County, Utah – “Box Elder County”) reported that ransomware was detected on its network on August 3, 2025. An investigation assisted by third-party cybersecurity and digital forensics specialists found intermittent unauthorized access between May 6 and August 3, 2025. During that period, threat actors exfiltrated a portion of county data, later publishing some of it online when the County refused to pay ransom.
A comprehensive review of the leaked files was completed on November 17, 2025 to identify affected individuals and the exact data involved. Written notifications were issued beginning December 17, 2025.
Download Official Breach Notice (PDF)Information Exposed
The County’s letter states that the compromised files contained “your name and data elements.” Specific data fields vary by individual; review your notice for details.
Key Timeline
- May 6 – August 3, 2025: Unauthorized access window
- August 3, 2025: Ransomware detected and investigation launched
- November 17, 2025: File review completed
- December 17, 2025: Consumer notifications mailed and filed with regulators
Steps Box Elder County Has Taken
- Deployed additional security tools for faster threat detection and response
- Began continuous endpoint monitoring
- Forced an enterprise-wide password reset
- Tightened external network-access restrictions
- Notified the Utah Attorney General, Utah Cyber Center, and other regulators
- Evaluating further measures to bolster cyber defenses
Your Recommended Next Moves
Box Elder County is offering complimentary identity-theft protection through IDX, including credit and CyberScan monitoring, a $1,000,000 reimbursement policy, and fully managed recovery support. Follow the enrollment instructions in your letter or scan the provided QR code.
In addition, the County encourages you to:
- Monitor bank, credit-card, and other financial statements for unfamiliar activity
- Obtain your free annual credit reports and review them carefully
- Place a free security freeze or fraud alert with the major credit bureaus, if desired
- Report suspected identity theft to local law enforcement and your state Attorney General
Company Overview
Box Elder County is a local governmental entity in northern Utah.
- Website: boxeldercountyut.gov
- Headquarters: Brigham City, Utah, United States
- Founded: 1856
Frequently Asked Questions
- I received a data breach letter from Box Elder County — what should I do?
- Follow the enrollment instructions for IDX identity-protection services, review your accounts for suspicious activity, and consider placing a credit freeze or fraud alert.
- What information did the Box Elder County breach expose?
- The letter indicates that your name plus one or more additional personal data elements were involved. The specific elements vary per individual.
- How many people were affected by the Box Elder County data breach?
- The County did not disclose an exact total in the public filing. Notifications were sent to every person whose information appeared in the compromised files.
- Did Box Elder County offer credit monitoring, and for how long?
- Yes. The County is providing complimentary identity-protection services through IDX, including credit monitoring and recovery assistance. The duration was not specified in the public notice.
- How do I submit a claim related to the Box Elder County data breach?
- Complete the free case-review form on this page. An attorney will assess your eligibility for potential compensation at no cost.
- How can I get the official breach notice (PDF) for Box Elder County?
- You can download it directly from the Maine Attorney General website using the button above.