Cyber Security Incident Website Statement

At Marin Housing Authority (MHA), protecting public funds and ensuring access to safe and affordable housing remains our highest priority. Recently, our organization experienced a cyber incident where a malicious threat actor posed as a trusted MHA vendor and diverted funds during routine transactions. These unauthorized transfers totaled $950,000. While these funds were earmarked for a specific program,   want to assure our clients and stakeholders that no services will be impacted, and there will be no reduction in funding or resources dedicated to our programs.

The incident occurred in July 2024, when an unknown threat actor compromised some of our email accounts. Once the breach was discovered in September, we immediately took action to secure our systems, revoke unauthorized access, and implement additional security measures, including multi-factor authentication for all employees.

We are grateful to our federal and state partners, including CACIC, who assisted us in investigating the root cause of the breach. Additionally, we have engaged a third-party cybersecurity vendor to analyze the incident further and ensure compliance with all legal and regulatory reporting requirements. This includes reviewing email data to determine if any sensitive client information was exposed. Currently, we have no evidence of a broader data breach.

Marin Housing remains steadfast in its commitment to transparency and integrity. Our IT team continues to strengthen system security, and we have implemented enhanced transaction protocols to prevent future incidents. We are also working diligently to identify new funding sources to replace what was lost, ensuring that our housing revitalization initiative moves forward as planned.

| want to reassure our clients, landlords, and vendors that there will be no disruption to services or programs. MHA is fully committed to supporting the individuals and families who rely on us. We are thankful to the cooperating agencies and partners who have helped us address this incident swiftly and effectively. Together, we are ensuring the continued safety, security, and success of our programs.

Thank you for your trust and patience as we work through this challenge. If you have any questions or concerns, please do not hesitate to reach out by email at EA@marinhousing.org.

Sincegely,

Kimberly Carroll

Executive Director

Marin Housing Authority