LA housing authority admits data breach following ransomware attack

The Housing Authority of the City of Los Angeles (HACLA) has suffered its second ransomware attack in as many years.

Threat actors known as Cactus added HACLA to its data leak website, claiming to have stolen 891 GB of files from the organization.

The archives reportedly include, “personal Identifiable Information, actual database backups, financial documents, executives\employees personal data, customer personal information, corporate confidential data and correspondence.”

No details

A small sample was posted as proof of the claims, and soon after, HACLA confirmed the news to BleepingComputer, saying it was currently investigating the incident.

“We’ve been affected by an attack on our IT network. As soon as we became aware of this, we hired external forensic IT specialists to help us investigate and respond appropriately,” a HACLA spokesperson told the publication.

“Our systems remain operational, we’re taking expert advice, and we remain committed to delivering important services for low income and vulnerable people in Los Angeles.”

The company did not share additional details, therefore we don’t know exactly when the breach happened, how the crooks gained access to the network, or if the information about stolen data is accurate. Furthermore, we don’t know who is affected by the breach, and if the stolen data belonged to employees, business partners, or end users.

HACLA is a public agency that provides affordable housing options and supportive services to low-income residents in Los Angeles, as well as families, seniors, and individuals with disabilities who need this type of assistance. It manages public housing, Section 8 vouchers, and various housing programs…