Homeless services agency orders staff to shut down computers after security alert
The Los Angeles Homeless Services Authority went offline this week to investigate a potential breach involving sensitive client data.
By Sanjay Caldwell ·
More than 60,000 unhoused individuals in the Los Angeles area have their personal data held by the Los Angeles Homeless Services Authority, which ordered all staff to stop working and disconnect their devices on Friday. The agency cited a potential security issue affecting its systems.
Gita O'Neill, the interim chief executive officer, sent an email to employees with the subject line URGENT: Log Off and Shut Down for the Week. The message instructed staff to take their machines offline through the weekend and avoid connecting to agency systems, including email, until an all-clear was issued. O'Neill confirmed to LAist that she sent the directive.
The agency oversees the Homeless Management Information System, a database that stores highly sensitive details about people experiencing homelessness. Records include names, dates of birth, Social Security numbers, and disabilities. The system also contains self-reported history of mental health conditions, substance abuse, income sources, and domestic violence.
In a statement issued Monday, LAHSA said it took internal computer systems offline as a precaution. The agency engaged outside cybersecurity specialists to determine the nature and scope of the incident. The statement, released on behalf of O'Neill by public relations strategist Trevor Daley, described the event as a potential cybersecurity incident. LAHSA noted that it is working with technical and legal teams to maintain essential operations.
O'Neill told LAist on Friday evening that the agency did not yet have enough information to state definitively whether sensitive or confidential personal information was accessed. She described the shutdown as a measure taken out of an abundance of caution while the IT team assessed the situation. She said protecting personal and confidential information is a top priority in the review.
Three leaders of LAHSA-funded service providers told LAist on Monday afternoon that they had not received any communications from the agency regarding the issue. All three organizations use the HMIS system. A LAHSA official not authorized to speak on the record said the shutdown order was still in place as of Monday evening.
The Housing Authority of the City of Los Angeles, a separate agency, has experienced similar breaches in recent years. In 2022, hackers accessed the network and may have viewed names, Social Security numbers, financial account numbers, and medical information. A second breach occurred in 2024, potentially exposing names, dates of birth, Social Security numbers, and phone numbers.
