Cyber Incident Victim: City of Lexington
Date:
Aug 2022
Location:
United States of America
Summary
Approximately $4 million in federal rent assistance and transitional housing funds were electronically stolen through unauthorized wire transfers redirected to a private account, which was subsequently frozen by the financial institution. The Lexington Police Financial Crimes Unit is investigating the incident, with preliminary findings indicating no criminal involvement by municipal or Community Action Council employees. While the city's financial systems remained uncompromised, recovery efforts are focused on reclaiming the diverted funds and ensuring continuity of housing support services for affected beneficiaries.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On August 28, 2022, the City of Lexington discovered that approximately $4 million in federal rent assistance and transitional housing funds intended for the Community Action Council had been electronically diverted. The funds, meant to support housing programs, were transferred via three unauthorized wire transfers to a private bank account controlled by an external actor or actors. The city immediately engaged the Lexington Police Department’s Financial Crimes Unit to investigate the incident. Preliminary findings indicated no evidence of criminal involvement by City employees or Community Action Council staff. The theft was detected when the Community Action Council confirmed non-receipt of the expected funds, prompting the City to trace the transactions.
The financial institution holding the fraudulent account froze it on the evening of August 28, preventing further movement of the stolen funds. Commissioner of Finance Erin Hensley confirmed the City’s internal financial systems remained uncompromised, indicating the attack exploited external transfer mechanisms rather than breaching municipal infrastructure. Recovery efforts focused on reclaiming the frozen funds through legal and financial channels while ensuring uninterrupted housing assistance services. The City collaborated with the Community Action Council to mitigate disruptions to beneficiaries. No additional details regarding the perpetrators, attack vectors, or long-term financial repercussions were disclosed in the initial public statement.