Cuyahoga Metropolitan Housing Authority

The Cuyahoga Metropolitan Housing Authority (CMHA) is a public housing agency serving Cuyahoga County, Ohio, a major urban area in the United States. It administers affordable housing programs, manages public housing units, and oversees housing choice voucher initiatives to assist qualified residents, primarily low-income families, seniors, and individuals with disabilities. The authority’s core mission focuses on providing safe, decent, and affordable housing, which involves extensive property management, tenant services, and compliance with federal and local housing regulations. As a key component of the regional social infrastructure, CMHA collaborates with federal partners and local agencies to address housing insecurity and support community stability. Its operations require the handling of substantial volumes of sensitive personal and financial data from applicants and residents, positioning it as a custodian of confidential information within the public sector. The organization’s footprint extends across the Cleveland metropolitan area, where it maintains a significant portfolio of residential properties and serves a diverse population facing economic challenges, though specific quantitative metrics regarding size or reach are not detailed in available records.

In February 2021, CMHA experienced a severe ransomware attack attributed to the Doppel Paymer group, which encrypted its computer systems and exfiltrated sensitive data. The incident led to the publication of stolen information on a dark web platform, directly threatening the privacy of residents and employees. Operational disruptions were extensive, including an eight-day public website outage and a prolonged loss of computer access for a large segment of the workforce. This paralysis hindered essential functions such as tenant communications, maintenance requests, payment processing, and administrative tasks, exacerbating challenges for a population reliant on housing assistance. The data breach exposed individuals to potential identity theft and fraud, while the attack itself highlighted the acute cybersecurity vulnerabilities faced by public housing authorities. The event stands as a documented case of ransomware impacting a U.S. municipal housing provider, illustrating the far-reaching consequences of such incidents on critical social services and data security practices in the sector.