Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Council staff report phishing incident that sent mass email; IT intervened and is investigating
Summary
A suspected email compromise sent mass messages to councilor contacts; city IT staff intervened, reset credentials, and advised stronger passwords and verification steps to avoid future spoofing.
Council staff told the meeting that a councilor’s email account appeared to be spoofed or compromised and was used to send out mass messages. Information-technology staff immediately responded, began cleanup, and advised councilors to update passwords and use stronger passphrases.
City IT staff described the response as rapid and coordinated. Councilors asked how to vet forwarded attachments and links; IT staff recommended verifying unexpected messages using a second contact method and checking that the message header shows the sender’s city address and whether the message originated outside the city email system.
Councilors also discussed basic security practices: using long passphrases (12–16 characters), not reusing city email passwords for other services and contacting IT if a suspicious message arrives. No personal data loss or formal service outage was reported at the meeting.
Ending: IT will continue cleanup and will present guidance to councilors on password best practices and message verification; staff encouraged contacting IT immediately if suspicious activity appears.
