Box Elder County Reports 2025 Data Breach to Montana Regulators

Box Elder County, Utah, reported a data security incident to Montana officials on December 17, 2025. The breach, which occurred on May 6, 2025, exposed sensitive personal information for affected individuals, including Full Name, Social Security Number, and Date of Birth. Those impacted should take steps to protect their identities due to the nature of the compromised data.

State: Montana
Breach date: May 6, 2025
Reported: December 17, 2025

What may have been exposed

Full Name
Social Security Number
Date of Birth
Government ID Number
Address History
Wage and Compensation Information
Tax Return Information
Direct Deposit Account Details

Box Elder County, Utah, a local government entity, filed a data breach notice with Montana officials on December 17, 2025. This report details an unspecified security incident that occurred on May 6, 2025, leading to the exposure of sensitive personal information. The filing acknowledges that individuals in Montana were impacted by this event.

The types of data reported as compromised in this incident include Full Name, Social Security Number, Date of Birth, Government ID Number, Address History, Wage and Compensation Information, Tax Return Information, and Direct Deposit Account Details. Such comprehensive exposure points to a significant security lapse involving core personal and financial identifiers.

The exposure of this combination of data types carries substantial risks. Compromised Social Security Numbers and Dates of Birth, for instance, are critical components for various forms of identity theft, which can lead to fraudulent accounts or tax issues. The inclusion of financial and government ID details further amplifies these long-term risks, as these identifiers are foundational and cannot be easily changed.

Individuals who receive a notification regarding this breach are advised to remain vigilant. It is recommended to monitor credit reports for any suspicious activity, place fraud alerts or credit freezes with credit bureaus, and review financial statements carefully. Changing passwords for online accounts and being wary of unsolicited communications are also prudent steps to mitigate potential risks.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Guard against tax fraud
File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Replace exposed ID documents
Contact your state DMV or the issuing agency about replacing an exposed driver's license, passport, or government ID number.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Montana Attorney General filing

Related data breach cases

Browse all Montana data breaches View the full case directory