Idaho Transportation Department

The Idaho Transportation Department (ITD) serves as the state-level agency responsible for the planning, development, and maintenance of Idaho's transportation infrastructure and systems. Its core mandate encompasses the regulation and oversight of all modes of transportation within the state, including highways, bridges, and the movement of commercial vehicles. A significant aspect of its operational scope involves the administration of programs related to commercial trucking, which includes the registration and permitting of carriers and the management of associated data for companies and individual commercial truckers operating within Idaho's jurisdiction. This regulatory function positions ITD as a key authority for ensuring compliance with state and federal transportation laws, managing the logistical flow of goods, and maintaining the safety and efficiency of the state's transportation network for both commercial and public use. The department's work directly supports Idaho's economy by facilitating trade and travel, and it operates under the authority of the state government to enforce standards and collect pertinent information from the transportation sector it monitors.

A defining incident in the department's recent history occurred in December 2017, which provides concrete evidence of its handling of highly sensitive personal and financial data. During this security event, the email accounts of two ITD employees were compromised, creating a potential exposure of confidential information belonging to approximately 140 individuals and entities. The data at risk included Social Security numbers and credit card details, underscoring the nature of the sensitive information the department routinely processes as part of its commercial vehicle registration and oversight duties. The department's subsequent identification of the breach and its notification of affected parties demonstrate an established protocol for incident response and regulatory compliance concerning data privacy. This event highlights the critical role ITD plays as a data steward for a regulated industry and the associated security responsibilities inherent in managing the personal and financial records of commercial operators within the state. The breach serves as a notable case study in the cybersecurity challenges faced by government agencies that handle sensitive commercial and personal data as part of their core regulatory mission.