Madison County Youth Court Judge Staci O'Neal's account breached after a phishing email in 2025
A phishing email opened by a Mississippi youth court judge gave attackers access to her account and exposed sensitive case-adjacent material. The case is one of the few publicly reported judicial breaches in the state.
What happened
According to WLBT, Madison County Youth Court Judge Staci O'Neal's account was breached after she opened what investigators described as a spam or phishing email. Documents released later showed the access exposed material tied to her judicial work. The breach was disclosed publicly in November 2025.
What happened
In November 2025, WLBT reported that Madison County Youth Court Judge Staci O'Neal's email account had been breached after she opened a spam email. Internal records reviewed by the station showed the access exposed material connected to her docket. The story noted the breach prompted internal review of court email security.
How it started
The reporting traced the entry point to a single phishing message. Once an attacker is inside a judge's mailbox, the surrounding context, names, addresses, schedules, and family details, can be cross-referenced against the same people-search pages anyone else uses.
For a sitting judge in a small jurisdiction, the public records exemption written into Mississippi law (Miss. Code Ann. § 25-61-12) only governs what the state itself releases. It does not reach the brokers.
What this means for you
If you're a judge, prosecutor, or court staffer in Mississippi, the proposed Daniel's Law-style bills (HB 678 and SB 2821) would give you a removal mechanism with teeth. Neither has been enacted yet. Until then, the work of pulling a judge's home address off broker pages is on the judge or their employer.
A phishing breach plus an exposed home address is the chain that produces a dossier. Cut the second link and the first one is much less useful.
Editorial rules: Only public, already-reported incidents. Never name a non-public victim. Always end with the prevention takeaway tied to our service. Cite at minimum one public source per claim.
What would have prevented this
Mississippi's public-records exemption for judges (Miss. Code Ann. § 25-61-12) only covers what the state holds. It does nothing about the broker pages that already list a judge's home address, family names, and prior addresses. Mississippi's Daniel's Law analog (HB 678 / SB 2821) is still pending. Until it lands, removal is the only deterrent. We monitor and remove broker listings continuously, so the dossier someone might assemble after a successful phish runs into a wall.