On March 28, 2025, the Houston Housing Authority (HHA) filed a notice of a data breach with the Texas Attorney General. This breach resulted from a ransomware attack that compromised sensitive consumer data, including Social Security numbers, financial account details, and medical information. The breach affected approximately 30,210 Texans, and the HHA initiated the process of sending out notification letters to inform those impacted.
These letters will outline the specific information that was compromised in the breach.
The breach initially began on September 22, 2024, when HHA detected the ransomware attack. Although HHA believed it had successfully contained the incident, the U.S. Department of Homeland Security later confirmed that ransomware was present on one of its computers. The cybercriminals behind the attack claimed to have stolen 38GB of sensitive data, which included personal information such as names, addresses, and dates of birth, along with health and financial details.
After the breach was confirmed, the Houston Housing Authority conducted a thorough review of the compromised files to identify the extent of the data exposure.
They determined that the breach impacted a wide range of sensitive data, and the notification process began soon after the investigation was complete. The breach affected individuals whose information was stored on HHA’s systems, and the affected victims are expected to receive notification letters detailing the data that was compromised.
Founded in 1938, the Houston Housing Authority provides affordable housing options and related services to low-income residents in Houston, Texas. HHA manages around 2,600 public housing units and 18,900 Housing Choice Voucher units, serving a population of over 60,000 residents. The organization has an annual revenue of $36 million and employs approximately 157 staff members. HHA is committed to enhancing the quality of life for its clients, but this breach highlights the importance of stronger cybersecurity measures to protect sensitive data.
Reference:
