The City of Los Angeles Housing Authority (HACLA) has finally issued a public notice outlining the impact of a ransomware breach first reported earlier this year.
A public agency that claims to hold the largest inventory of affordable housing in the city has acknowledged a “cyber event that disrupted the system” in early January 2023.
This followed claims by the infamous ransomware group LockBit to steal and publish over 15 TB of files from authorities.
For more on the LockBit group, see LockBit Remains Most Prolific Ransomware in Q3.
In its latest update, HACLA confirmed that it discovered encrypted files in its IT environment on December 31, 2022.
“HACLA learned that it had fallen victim to a complex cyberattack. HACLA immediately shut down its servers and enlisted the help of third-party forensic experts to launch an investigation to determine the nature and scope of the incident. Did.”
“A forensic investigation revealed that there was unauthorized access to certain servers between January 15, 2022 and December 31, 2022.”
After conducting a “comprehensive review” of all data, we made a final determination on February 13, 2023 that the affected systems contained personal information. Attackers seem to have a potential treasure trove of data to use or sell on the dark web.
“While the specific data elements will vary for each potentially affected individual, the range of information that may be relevant includes the individual’s name, social security number, date of birth, passport number, driver’s license, number or state identification number, taxpayer identification number, military identification number, government-issued identification number, credit/debit card number, financial account number, health insurance information, and medical information,” HACLA revealed. .
The Housing Authority has notified relevant authorities and individuals affected by the incident.
