Gooding County

Gooding County is a municipal government entity located in the state of Idaho, with its headquarters situated in the United States of America. As a county, it provides a broad array of services to residents, including public safety, health and human services, road maintenance, land‑use planning, and administrative record‑keeping. These functions are carried out under the authority of Idaho state law and are intended to support the welfare and safety of the local community. The county operates through various elected offices and appointed departments that deliver these essential public functions.

On March 25, 2025, Gooding County detected a ransomware incident that affected its computer network and promptly initiated a response protocol. The county engaged external legal counsel and a nationally recognized cyber security and digital forensics firm to contain the breach, begin restoration of operations, and investigate the full scope of the attack. As part of its response, Gooding County notified federal law‑enforcement agencies and, through its ongoing investigation, determined that the incident likely involved the unauthorized acquisition of personal information protected under Idaho law. The county is reviewing the compromised data to identify what specific information was taken and to whom it relates, with the intention of issuing written notices to affected individuals and offering complimentary credit monitoring where appropriate. Additionally, the county informed its ITS Chief Information Security Officer of the incident as part of its internal communication and oversight process.

Gooding County’s handling of the ransomware event highlights its role as a local governmental body with regulatory responsibilities for protecting resident data and ensuring continuity of essential services. Its position within the public‑sector administration sector requires compliance with state and federal privacy and cybersecurity regulations, which guided the incident response and notification actions undertaken. The coordination of legal, technical, and law‑enforcement resources demonstrates a notable competency in managing complex cyber incidents while maintaining transparency with affected parties. As a governmental entity, Gooding County is not a private corporation or subsidiary; it derives its authority from the state of Idaho and is accountable to both state oversight bodies and the public it serves.