Computers confiscated by IT after Monday council meeting
Westfield Clerk Treasurer Cindy Gossard spoke to the city council Monday night, updating them on alleged spyware found on her office’s computers last month. Less than three hours later, city IT personnel confiscated several laptop computers from the Clerk’s Office, then sent an email to Gossard about the confiscation. Gossard has since filed a report with sheriff’s department about the missing computers.
Gossard says shortly after the presentation her office was “raided” and computers belonging to the city and a private forensic IT company, hired by Gossard, were confiscated by city officials. The incident prompted Gossard to file a report with the Hamilton County Sheriff’s Department.
According to the Sheriff’s Department, “On July 27th, 2021, the Hamilton County Sheriff’s Office opened an investigation with the City of Westfield. The investigation is still ongoing, and no information is being released at this time.”
During the Monday night council update, Gossard told members the software, known as BeyondTrust, placed on her computers by the city’s IT department was originally discovered in June, and that she was “deeply concerned” as to who had access to city financial and employee records. Gossard also told council members the user could potentially change data in a way that it would appear as if her office made the changes.
In June, Westfield Mayor Andy Cook said, “The BeyondTrust software (or predecessor) is a program that the Clerk is well aware of and has used dozens of times. It allows the IT department, upon request and with permission, to remotely access a computer while it’s in operation to assist with issues raised by individuals throughout the city. It’s on every city computer and has been used for 10 years. This technology is standard in almost all industries.”
Westfield’s IT Director Chris Larson told council members Monday that BeyondTrust software has the ability to access a city employee’s computer without their knowledge.
Gossard explained to council members that she hired a forensic investigator to determine who has been accessing city data and to determine if any systems had been compromised. “It shouldn’t be a surprise to the administration that I hired a forensic investigator. We’ve had previous communication about this,” Gossard said.
Gossard told The Reporter she became aware that computers had been confiscated when she received an email from the city’s IT Director late Monday night, a couple of hours after the council meeting concluded.
The email said the computers were confiscated by IT personnel to protect the data stored on them, and that two of computers found in the office were not city owned and were running unknown software. Gossard said those computers belonged to the forensic investigator hired by Gossard and were running software attempting to determine if city data had been breached.
“At no time did I authorize or otherwise give permission to any administration employee to enter my office. This raid by the Mayor’s employee into the office of a separately elected and independent City official, is highly disturbing. The administration removed staff computers and computers and equipment from the investigator in a brazen attempt to stop my investigation,” said Gossard.
“While I am deeply concerned about this incident, I can assure the public that I will not be intimidated. I am committed to fully investigating this incident, as well as continuing to ensure that City’s financial and confidential data is protected and remains protected.”
The City of Westfield told The Reporter, “In a media report the Westfield Clerk Treasurer indicated that she does not know what information was accessed or downloaded. She admitted, however, that the third party copied the entirety of city computers’ hard drives. That is troubling.”
City officials said they see this as a serious matter because “the clerk has access to personal information for all city employees, all city financial accounts, and more. The city is taking all appropriate action to address this issue and safeguard its data.”
Attorney representing Westfield claims theft allegations ‘trumped-up”
Editor’s note: After Westfield Clerk Treasurer Cindy Gossard filed a report with the Hamilton County Sheriff about laptop computers taken from her office late Monday night, the following letter was sent from Blake J. Burgan, an attorney representing the City of Westfield, to Gossard and her attorney, William Webster, on Tuesday.
As you no doubt know, Chris Larsen stopped an active cyber security breach at the Clerk’s office last night. He observed laptops running a then-unknown software. He also observed that city laptops were dismantled, with the hard drives removed. With all of the sensitive information on the city’s systems, including financial information, confidential vendor documents, confidential police and other data, Mr. Larsen was forced to take immediate action to preserve that information.
Mr. Larsen informed the Clerk-Treasurer of his actions last night, noting that “This appeared to be unauthorized third-party access to City systems and is considered a cyber-security threat . . . There also appeared to be other laptops that were opened and the hard drives removed.”
This is unprecedented. For the Clerk-Treasurer to act with such brazen disregard for the integrity of the city’s data is not only reckless, it is a clear breach of her duties. We need immediate answers about what occurred last night and what information was removed from city property and systems. We also need the contact information of the third party and the alleged “contract” the Clerk-Treasurer entered into with that party. This is of the utmost urgency. After my numerous invitations and attempts to meet regarding this issue, it is unfortunate that we are at this stage because of your and your client’s refusal to come to reason.
Finally, I understand that the Hamilton County Sheriff’s office was reviewing this issue based on a trumped-up theft allegation. It’s truly unfortunate that the Clerk and you have stooped so low to defame and sully the good name of a dedicated city employee.
Take notice to preserve all communications and documents related to this matter, whether via text message, private social media message, email, or otherwise.
Blake J. Burgan
Taft Law