Mayor Javier Joven is taking action regarding this serious data breach. He says it’s more than just about protocols and past failures; he is demanding transparency in the City of Odessa. The Mayor gave a list of facts.
The Odessa City Council gave a unanimous consensus for the Mayor to sign an affidavit that outlines the events leading up to finding out about this data breach. The affidavit basically gives the authority for the investigation to continue and for the Odessa Police Department to obtain a warrant. The City of Odessa will also request assistance from the Attorney General’s office.
During the Special Council meeting this afternoon, the interim IT Director for the City of Odessa released some preliminary findings:
-July 16, 2023 - Freedom of Information (FOI) request was fulfilled by IT Microsoft System Specialist and sent to Legal for review
-Legal department discovered emails being sent from the user account NBrooks after the termination date.
-IT department confirmed that the NBrooks account was still active and that the mailbox had been accessed after the termination date
-IT Microsoft System Specialist changed the password for the account
-Odessa PD is investigating the issue and working closely with the IT Department
******It has been discovered that accounts assigned to a terminated high-ranking employee have been recently accessed without authorization, and an investigation has been launched to determine who accessed the accounts and how. Contrary to the City of Odessa policy, access to the City’s computer network and systems was not removed after the appointment of the City Attorney was terminated by the City Council.
To date, the investigation has revealed that the former City Attorney’s account was used to access the City’s network numerous times, and this also happened as recently as last week. Sensitive information was then transferred by email to a private account. An ongoing investigation indicates that a number of systems were accessed, such as Odessa Police Department reports, personnel information, and GovQA, which is the City’s hosted system for public information requests.
“Once the investigation concludes, the City will use all means available, including criminal charges, to ensure that everyone involved in this breach is punished to the full extent of the law,” stated Mayor Joven.
We will continue to keep you updated.
