A cyberattack on Arizona’s court system stole personal information for more than a million people and is believed to have started when a court employee clicked a malicious link in an email.

The Arizona Supreme Court said the attack exposed information belonging to about 1.3 million people with unpaid court fees, fines, or restitution connected to traffic and criminal violations dating back as far as three decades.

The breach also included nearly 30,000 active and inactive orders of protection and approximately 150,000 reports dating back to 2010 from a foster care board that provides recommendations in cases involving allegations that parents are unable or unfit to care for their children.

Court technology personnel detected the attack on a backup server and shut it down about two hours after discovering the intrusion on Sept. 24. The incident remains under investigation, and the court has since begun notifying people whose information was affected.

Arizona Supreme Court spokesperson Alberto Rodriguez said Tuesday there is currently no evidence that the stolen information has been used or distributed following the breach.

The attack has not disrupted court proceedings or delayed cases, according to Rodriguez. Court officials also said the hackers did not alter or delete records and did not obtain information involving jurors, witnesses or court employees.

The incident highlights the potential consequences of phishing and other cyberattacks targeting government systems, particularly when those systems contain sensitive legal, financial, and family-related records.